# Flog Txt Version 1 # Analyzer Version: 4.2.2 # Analyzer Build Date: Jun 7 2021 05:43:29 # Log Creation Date: 17.06.2021 20:42:41.646 Process: id = "1" image_name = "windows session manager.exe" filename = "c:\\users\\keecfmwgj\\desktop\\windows session manager.exe" page_root = "0x3e0a9000" os_pid = "0xdb0" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x36c" cmd_line = "\"C:\\Users\\kEecfMwgj\\Desktop\\Windows Session Manager.exe\" " cur_dir = "C:\\Users\\kEecfMwgj\\Desktop\\" os_username = "Q9IATRKPRH\\kEecfMwgj" bitness = "32" os_groups = "Q9IATRKPRH\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e32c" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1 os_tid = 0xdb4 [0086.189] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0 [0088.919] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\AppContext", ulOptions=0x0, samDesired=0x20019, phkResult=0x2fdc28 | out: phkResult=0x2fdc28*=0x0) returned 0x2 [0088.921] RegCloseKey (hKey=0x80000002) returned 0x0 [0088.928] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\Windows Session Manager.exe", nBufferLength=0x105, lpBuffer=0x2fded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\Windows Session Manager.exe", lpFilePart=0x0) returned 0x36 [0088.936] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\Windows Session Manager.exe", nBufferLength=0x105, lpBuffer=0x2fde48, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\Windows Session Manager.exe", lpFilePart=0x0) returned 0x36 [0088.964] VirtualProtect (in: lpAddress=0x10c2000, dwSize=0x3a304, flNewProtect=0x40, lpflOldProtect=0x2fea2c | out: lpflOldProtect=0x2fea2c*=0x80) returned 1 [0091.354] GetEnvironmentVariableW (in: lpName="COR_PROFILER", lpBuffer=0x2fe7dc, nSize=0x80 | out: lpBuffer="") returned 0x0 [0091.393] GetEnvironmentVariableW (in: lpName="COR_ENABLE_PROFILING", lpBuffer=0x2fe7dc, nSize=0x80 | out: lpBuffer="") returned 0x0 [0092.344] GetEnvironmentVariableW (in: lpName="userprofile", lpBuffer=0x2fe6d0, nSize=0x80 | out: lpBuffer="") returned 0x12 [0092.346] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x105, lpBuffer=0x2fe31c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0092.347] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0x2fe2fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0092.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fe800) returned 1 [0092.530] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0x2fe2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0092.532] FindFirstFileW (in: lpFileName="C:\\Users\\*", lpFindFileData=0x2fe5b0 | out: lpFindFileData=0x2fe5b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x791634f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x791634f0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x360058 [0092.536] FindNextFileW (in: hFindFile=0x360058, lpFindFileData=0x2fe5b8 | out: lpFindFileData=0x2fe5b8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x791634f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x791634f0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.536] FindNextFileW (in: hFindFile=0x360058, lpFindFileData=0x2fe5b8 | out: lpFindFileData=0x2fe5b8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1 [0092.536] FindNextFileW (in: hFindFile=0x360058, lpFindFileData=0x2fe5b8 | out: lpFindFileData=0x2fe5b8*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x629b4b20, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x629b4b20, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1 [0092.537] FindNextFileW (in: hFindFile=0x360058, lpFindFileData=0x2fe5b8 | out: lpFindFileData=0x2fe5b8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Default User", cAlternateFileName="DEFAUL~1")) returned 1 [0092.537] FindNextFileW (in: hFindFile=0x360058, lpFindFileData=0x2fe5b8 | out: lpFindFileData=0x2fe5b8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x286e4016, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x286e4016, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0092.537] FindNextFileW (in: hFindFile=0x360058, lpFindFileData=0x2fe5b8 | out: lpFindFileData=0x2fe5b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x791634f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xf29f86d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf29f86d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kEecfMwgj", cAlternateFileName="KEECFM~1")) returned 1 [0092.537] FindNextFileW (in: hFindFile=0x360058, lpFindFileData=0x2fe5b8 | out: lpFindFileData=0x2fe5b8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Public", cAlternateFileName="")) returned 1 [0092.537] FindNextFileW (in: hFindFile=0x360058, lpFindFileData=0x2fe5b8 | out: lpFindFileData=0x2fe5b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0092.537] FindClose (in: hFindFile=0x360058 | out: hFindFile=0x360058) returned 1 [0092.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fe570) returned 1 [0092.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fe7d0) returned 1 [0092.545] GetUserNameW (in: lpBuffer=0x2fe5dc, pcbBuffer=0x2fe854 | out: lpBuffer="kEecfMwgj", pcbBuffer=0x2fe854) returned 1 [0092.561] GetUserNameW (in: lpBuffer=0x2fe5dc, pcbBuffer=0x2fe854 | out: lpBuffer="kEecfMwgj", pcbBuffer=0x2fe854) returned 1 [0092.562] GetUserNameW (in: lpBuffer=0x2fe5dc, pcbBuffer=0x2fe854 | out: lpBuffer="kEecfMwgj", pcbBuffer=0x2fe854) returned 1 [0092.563] GetUserNameW (in: lpBuffer=0x2fe5dc, pcbBuffer=0x2fe854 | out: lpBuffer="kEecfMwgj", pcbBuffer=0x2fe854) returned 1 [0092.564] GetUserNameW (in: lpBuffer=0x2fe5dc, pcbBuffer=0x2fe854 | out: lpBuffer="kEecfMwgj", pcbBuffer=0x2fe854) returned 1 [0092.565] GetUserNameW (in: lpBuffer=0x2fe5dc, pcbBuffer=0x2fe854 | out: lpBuffer="kEecfMwgj", pcbBuffer=0x2fe854) returned 1 [0092.601] GetUserNameW (in: lpBuffer=0x2fe5dc, pcbBuffer=0x2fe854 | out: lpBuffer="kEecfMwgj", pcbBuffer=0x2fe854) returned 1 [0092.602] GetUserNameW (in: lpBuffer=0x2fe5dc, pcbBuffer=0x2fe854 | out: lpBuffer="kEecfMwgj", pcbBuffer=0x2fe854) returned 1 [0092.603] GetUserNameW (in: lpBuffer=0x2fe5dc, pcbBuffer=0x2fe854 | out: lpBuffer="kEecfMwgj", pcbBuffer=0x2fe854) returned 1 [0092.604] GetUserNameW (in: lpBuffer=0x2fe5dc, pcbBuffer=0x2fe854 | out: lpBuffer="kEecfMwgj", pcbBuffer=0x2fe854) returned 1 [0092.605] GetUserNameW (in: lpBuffer=0x2fe5dc, pcbBuffer=0x2fe854 | out: lpBuffer="kEecfMwgj", pcbBuffer=0x2fe854) returned 1 [0092.607] GetUserNameW (in: lpBuffer=0x2fe5dc, pcbBuffer=0x2fe854 | out: lpBuffer="kEecfMwgj", pcbBuffer=0x2fe854) returned 1 [0093.935] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x23c [0093.937] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x244 [0093.947] SetEvent (hEvent=0x244) returned 1 [0093.949] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x2fe0bc*=0x23c, lpdwindex=0x2fdee0 | out: lpdwindex=0x2fdee0) returned 0x0 [0096.086] CoGetContextToken (in: pToken=0x2fdf94 | out: pToken=0x2fdf94) returned 0x0 [0096.088] CoGetContextToken (in: pToken=0x2fdef4 | out: pToken=0x2fdef4) returned 0x0 [0096.089] WbemDefPath:IUnknown:QueryInterface (in: This=0x3be890, riid=0x2fdfc4*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x2fdfc0 | out: ppvObject=0x2fdfc0*=0x3be890) returned 0x0 [0096.090] WbemDefPath:IUnknown:AddRef (This=0x3be890) returned 0x3 [0096.090] WbemDefPath:IUnknown:Release (This=0x3be890) returned 0x2 [0096.094] WbemDefPath:IWbemPath:SetText (This=0x3be890, uMode=0x4, pszPath="//./root/cimv2") returned 0x0 [0096.095] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x3be890, puCount=0x2fe83c | out: puCount=0x2fe83c*=0x2) returned 0x0 [0096.095] WbemDefPath:IWbemPath:GetText (in: This=0x3be890, lFlags=4, puBuffLength=0x2fe838*=0x0, pszText=0x0 | out: puBuffLength=0x2fe838*=0xf, pszText=0x0) returned 0x0 [0096.096] WbemDefPath:IWbemPath:GetText (in: This=0x3be890, lFlags=4, puBuffLength=0x2fe838*=0xf, pszText="00000000000000" | out: puBuffLength=0x2fe838*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0096.365] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x2fe6e4*=0x2c8, lpdwindex=0x2fe59c | out: lpdwindex=0x2fe59c) returned 0x0 [0102.175] CoGetContextToken (in: pToken=0x2fe51c | out: pToken=0x2fe51c) returned 0x0 [0102.175] CoGetContextToken (in: pToken=0x2fe47c | out: pToken=0x2fe47c) returned 0x0 [0102.176] CoGetContextToken (in: pToken=0x2fe47c | out: pToken=0x2fe47c) returned 0x0 [0102.176] CoGetContextToken (in: pToken=0x2fe41c | out: pToken=0x2fe41c) returned 0x0 [0102.176] IUnknown:QueryInterface (in: This=0x36e7e0, riid=0x72418ae0*(Data1=0x1da, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2fe3f4 | out: ppvObject=0x2fe3f4*=0x36e7f0) returned 0x0 [0102.176] CObjectContext::ContextCallback () returned 0x0 [0102.184] IUnknown:Release (This=0x36e7f0) returned 0x1 [0102.185] CoUnmarshalInterface (in: pStm=0x3bf4b0, riid=0x72272a54*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x2fe470 | out: ppv=0x2fe470*=0x3f0284) returned 0x0 [0102.185] CoMarshalInterface (pStm=0x3bf4b0, riid=0x72272a54*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x3f0284, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0) returned 0x0 [0102.185] WbemLocator:IUnknown:QueryInterface (in: This=0x3f0284, riid=0x2fe54c*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x2fe548 | out: ppvObject=0x2fe548*=0x3f0e80) returned 0x0 [0102.190] WbemLocator:IUnknown:Release (This=0x3f0284) returned 0x1 [0102.190] IWbemServices:ExecQuery (in: This=0x3f0e80, strQueryLanguage="WQL", strQuery="Select * from Win32_ComputerSystem", lFlags=16, pCtx=0x0, ppEnum=0x2fe7a8 | out: ppEnum=0x2fe7a8*=0x385920) returned 0x0 [0102.197] IUnknown:QueryInterface (in: This=0x385920, riid=0x6ea435b4*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2fe57c | out: ppvObject=0x2fe57c*=0x385924) returned 0x0 [0102.197] IClientSecurity:QueryBlanket (in: This=0x385924, pProxy=0x385920, pAuthnSvc=0x2fe5cc, pAuthzSvc=0x2fe5c8, pServerPrincName=0x2fe5c0, pAuthnLevel=0x2fe5c4, pImpLevel=0x2fe5b4, pAuthInfo=0x2fe5b8, pCapabilites=0x2fe5bc | out: pAuthnSvc=0x2fe5cc*=0xa, pAuthzSvc=0x2fe5c8*=0x0, pServerPrincName=0x2fe5c0, pAuthnLevel=0x2fe5c4*=0x6, pImpLevel=0x2fe5b4*=0x2, pAuthInfo=0x2fe5b8, pCapabilites=0x2fe5bc*=0x1) returned 0x0 [0102.197] IUnknown:Release (This=0x385924) returned 0x1 [0102.197] IUnknown:QueryInterface (in: This=0x385920, riid=0x6ea435a4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2fe570 | out: ppvObject=0x2fe570*=0x3f2164) returned 0x0 [0102.197] IUnknown:QueryInterface (in: This=0x385920, riid=0x6ea435b4*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2fe55c | out: ppvObject=0x2fe55c*=0x385924) returned 0x0 [0102.197] IClientSecurity:SetBlanket (This=0x385924, pProxy=0x385920, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0102.210] IUnknown:Release (This=0x385924) returned 0x2 [0102.210] WbemLocator:IUnknown:Release (This=0x3f2164) returned 0x1 [0102.210] CoTaskMemFree (pv=0x3e9f10) [0102.210] IUnknown:AddRef (This=0x385920) returned 0x2 [0102.210] CoGetContextToken (in: pToken=0x2fda9c | out: pToken=0x2fda9c) returned 0x0 [0102.210] IUnknown:QueryInterface (in: This=0x36e670, riid=0x722fb24c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2fda58 | out: ppvObject=0x2fda58*=0x36e67c) returned 0x0 [0102.211] IComThreadingInfo:GetCurrentApartmentType (in: This=0x36e67c, pAptType=0x2fda94 | out: pAptType=0x2fda94*=3) returned 0x0 [0102.211] IUnknown:Release (This=0x36e67c) returned 0x0 [0102.211] CoGetObjectContext (in: riid=0x72272a54*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x3e5104 | out: ppv=0x3e5104*=0x36e670) returned 0x0 [0102.211] CoGetContextToken (in: pToken=0x2fdeac | out: pToken=0x2fdeac) returned 0x0 [0102.211] IUnknown:QueryInterface (in: This=0x385920, riid=0x72361aa8*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2fde48 | out: ppvObject=0x2fde48*=0x3f214c) returned 0x0 [0102.211] WbemLocator:IRpcOptions:Query (in: This=0x3f214c, pPrx=0x3e50a0, dwProperty=2, pdwValue=0x2fdf3c | out: pdwValue=0x2fdf3c) returned 0x80004002 [0102.211] WbemLocator:IUnknown:Release (This=0x3f214c) returned 0x2 [0102.211] CoGetContextToken (in: pToken=0x2fe47c | out: pToken=0x2fe47c) returned 0x0 [0102.211] CoGetContextToken (in: pToken=0x2fe3dc | out: pToken=0x2fe3dc) returned 0x0 [0102.211] IUnknown:QueryInterface (in: This=0x385920, riid=0x2fe4ac*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x2fe378 | out: ppvObject=0x2fe378*=0x385920) returned 0x0 [0102.212] IUnknown:Release (This=0x385920) returned 0x2 [0102.212] WbemLocator:IUnknown:Release (This=0x3f0e80) returned 0x0 [0102.212] SysStringLen (param_1=0x0) returned 0x0 [0102.212] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x3be890, puCount=0x2fe7f8 | out: puCount=0x2fe7f8*=0x2) returned 0x0 [0102.212] WbemDefPath:IWbemPath:GetText (in: This=0x3be890, lFlags=4, puBuffLength=0x2fe7f4*=0x0, pszText=0x0 | out: puBuffLength=0x2fe7f4*=0xf, pszText=0x0) returned 0x0 [0102.213] WbemDefPath:IWbemPath:GetText (in: This=0x3be890, lFlags=4, puBuffLength=0x2fe7f4*=0xf, pszText="00000000000000" | out: puBuffLength=0x2fe7f4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0102.216] CoGetContextToken (in: pToken=0x2fe5fc | out: pToken=0x2fe5fc) returned 0x0 [0102.216] IEnumWbemClassObject:Clone (in: This=0x385920, ppEnum=0x2fe804 | out: ppEnum=0x2fe804*=0x385ab0) returned 0x0 [0102.217] IUnknown:QueryInterface (in: This=0x385ab0, riid=0x6ea435b4*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2fe66c | out: ppvObject=0x2fe66c*=0x385ab4) returned 0x0 [0102.218] IClientSecurity:QueryBlanket (in: This=0x385ab4, pProxy=0x385ab0, pAuthnSvc=0x2fe6bc, pAuthzSvc=0x2fe6b8, pServerPrincName=0x2fe6b0, pAuthnLevel=0x2fe6b4, pImpLevel=0x2fe6a4, pAuthInfo=0x2fe6a8, pCapabilites=0x2fe6ac | out: pAuthnSvc=0x2fe6bc*=0xa, pAuthzSvc=0x2fe6b8*=0x0, pServerPrincName=0x2fe6b0, pAuthnLevel=0x2fe6b4*=0x6, pImpLevel=0x2fe6a4*=0x2, pAuthInfo=0x2fe6a8, pCapabilites=0x2fe6ac*=0x1) returned 0x0 [0102.218] IUnknown:Release (This=0x385ab4) returned 0x1 [0102.218] IUnknown:QueryInterface (in: This=0x385ab0, riid=0x6ea435a4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2fe660 | out: ppvObject=0x2fe660*=0x3f0284) returned 0x0 [0102.218] IUnknown:QueryInterface (in: This=0x385ab0, riid=0x6ea435b4*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2fe64c | out: ppvObject=0x2fe64c*=0x385ab4) returned 0x0 [0102.218] IClientSecurity:SetBlanket (This=0x385ab4, pProxy=0x385ab0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0102.220] IUnknown:Release (This=0x385ab4) returned 0x2 [0102.220] WbemLocator:IUnknown:Release (This=0x3f0284) returned 0x1 [0102.220] CoTaskMemFree (pv=0x3e9ee0) [0102.220] IUnknown:AddRef (This=0x385ab0) returned 0x2 [0102.220] CoGetContextToken (in: pToken=0x2fdb7c | out: pToken=0x2fdb7c) returned 0x0 [0102.221] CoGetContextToken (in: pToken=0x2fdf8c | out: pToken=0x2fdf8c) returned 0x0 [0102.221] IUnknown:QueryInterface (in: This=0x385ab0, riid=0x72361aa8*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2fdf28 | out: ppvObject=0x2fdf28*=0x3f026c) returned 0x0 [0102.221] WbemLocator:IRpcOptions:Query (in: This=0x3f026c, pPrx=0x3e50d0, dwProperty=2, pdwValue=0x2fe01c | out: pdwValue=0x2fe01c) returned 0x80004002 [0102.221] WbemLocator:IUnknown:Release (This=0x3f026c) returned 0x2 [0102.221] CoGetContextToken (in: pToken=0x2fe55c | out: pToken=0x2fe55c) returned 0x0 [0102.221] CoGetContextToken (in: pToken=0x2fe4bc | out: pToken=0x2fe4bc) returned 0x0 [0102.221] IUnknown:QueryInterface (in: This=0x385ab0, riid=0x2fe58c*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x2fe458 | out: ppvObject=0x2fe458*=0x385ab0) returned 0x0 [0102.221] IUnknown:Release (This=0x385ab0) returned 0x2 [0102.221] SysStringLen (param_1=0x0) returned 0x0 [0102.222] IEnumWbemClassObject:Reset (This=0x385ab0) returned 0x0 [0102.233] CoTaskMemAlloc (cb=0x4) returned 0x3df1d0 [0102.236] IEnumWbemClassObject:Next (in: This=0x385ab0, lTimeout=-1, uCount=0x1, apObjects=0x3df1d0, puReturned=0x2520fd4 | out: apObjects=0x3df1d0*=0x3f6fe0, puReturned=0x2520fd4*=0x1) returned 0x0 [0102.395] IUnknown:QueryInterface (in: This=0x3f6fe0, riid=0x72272a54*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2fde5c | out: ppvObject=0x2fde5c*=0x3f6fe0) returned 0x0 [0102.395] IUnknown:QueryInterface (in: This=0x3f6fe0, riid=0x72361b6c*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x2fde10 | out: ppvObject=0x2fde10*=0x0) returned 0x80004002 [0102.395] IUnknown:QueryInterface (in: This=0x3f6fe0, riid=0x72361e84*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x2fdc38 | out: ppvObject=0x2fdc38*=0x0) returned 0x80004002 [0102.396] IUnknown:AddRef (This=0x3f6fe0) returned 0x3 [0102.396] IUnknown:QueryInterface (in: This=0x3f6fe0, riid=0x7236182c*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x2fd76c | out: ppvObject=0x2fd76c*=0x0) returned 0x80004002 [0102.396] IUnknown:QueryInterface (in: This=0x3f6fe0, riid=0x72361764*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x2fd71c | out: ppvObject=0x2fd71c*=0x0) returned 0x80004002 [0102.396] IUnknown:QueryInterface (in: This=0x3f6fe0, riid=0x72291388*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2fd728 | out: ppvObject=0x2fd728*=0x3f6fe4) returned 0x0 [0102.396] IMarshal:GetUnmarshalClass (in: This=0x3f6fe4, riid=0x72272a54*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x2fd730 | out: pCid=0x2fd730*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0102.396] IUnknown:Release (This=0x3f6fe4) returned 0x3 [0102.396] CoGetContextToken (in: pToken=0x2fd788 | out: pToken=0x2fd788) returned 0x0 [0102.396] CoGetContextToken (in: pToken=0x2fdb9c | out: pToken=0x2fdb9c) returned 0x0 [0102.396] IUnknown:QueryInterface (in: This=0x3f6fe0, riid=0x72361aa8*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2fdc1c | out: ppvObject=0x2fdc1c*=0x0) returned 0x80004002 [0102.396] IUnknown:Release (This=0x3f6fe0) returned 0x2 [0102.396] CoGetContextToken (in: pToken=0x2fe184 | out: pToken=0x2fe184) returned 0x0 [0102.396] CoGetContextToken (in: pToken=0x2fe0e4 | out: pToken=0x2fe0e4) returned 0x0 [0102.396] IUnknown:QueryInterface (in: This=0x3f6fe0, riid=0x2fe1b4*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x2fe1b0 | out: ppvObject=0x2fe1b0*=0x3f6fe0) returned 0x0 [0102.396] IUnknown:AddRef (This=0x3f6fe0) returned 0x4 [0102.396] IUnknown:Release (This=0x3f6fe0) returned 0x3 [0102.397] IUnknown:Release (This=0x3f6fe0) returned 0x2 [0102.397] CoTaskMemFree (pv=0x3df1d0) [0102.398] CoGetContextToken (in: pToken=0x2fe4f4 | out: pToken=0x2fe4f4) returned 0x0 [0102.398] IUnknown:AddRef (This=0x3f6fe0) returned 0x3 [0102.402] IWbemClassObject:Get (in: This=0x3f6fe0, wszName="__GENUS", lFlags=0, pVal=0x2fe7e0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2fe874*=0, plFlavor=0x2fe870*=0 | out: pVal=0x2fe7e0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x2fe874*=3, plFlavor=0x2fe870*=64) returned 0x0 [0102.404] IWbemClassObject:Get (in: This=0x3f6fe0, wszName="__PATH", lFlags=0, pVal=0x2fe7c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2fe85c*=0, plFlavor=0x2fe858*=0 | out: pVal=0x2fe7c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\Q9IATRKPRH\\ROOT\\cimv2:Win32_ComputerSystem.Name=\"Q9IATRKPRH\"", varVal2=0x0), pType=0x2fe85c*=8, plFlavor=0x2fe858*=64) returned 0x0 [0102.406] SysStringByteLen (bstr="\\\\Q9IATRKPRH\\ROOT\\cimv2:Win32_ComputerSystem.Name=\"Q9IATRKPRH\"") returned 0x7c [0102.406] SysStringByteLen (bstr="\\\\Q9IATRKPRH\\ROOT\\cimv2:Win32_ComputerSystem.Name=\"Q9IATRKPRH\"") returned 0x7c [0102.407] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x32c [0102.407] SetEvent (hEvent=0x244) returned 1 [0102.407] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x2fe7b0*=0x32c, lpdwindex=0x2fe5d4 | out: lpdwindex=0x2fe5d4) returned 0x0 [0102.410] CoGetContextToken (in: pToken=0x2fe684 | out: pToken=0x2fe684) returned 0x0 [0102.411] CoGetContextToken (in: pToken=0x2fe5e4 | out: pToken=0x2fe5e4) returned 0x0 [0102.411] WbemDefPath:IUnknown:QueryInterface (in: This=0x3be9e0, riid=0x2fe6b4*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x2fe6b0 | out: ppvObject=0x2fe6b0*=0x3be9e0) returned 0x0 [0102.411] WbemDefPath:IUnknown:AddRef (This=0x3be9e0) returned 0x3 [0102.411] WbemDefPath:IUnknown:Release (This=0x3be9e0) returned 0x2 [0102.411] WbemDefPath:IWbemPath:SetText (This=0x3be9e0, uMode=0x4, pszPath="\\\\Q9IATRKPRH\\ROOT\\cimv2:Win32_ComputerSystem.Name=\"Q9IATRKPRH\"") returned 0x0 [0102.411] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x3be890, puCount=0x2fe830 | out: puCount=0x2fe830*=0x2) returned 0x0 [0102.411] WbemDefPath:IWbemPath:GetText (in: This=0x3be890, lFlags=4, puBuffLength=0x2fe82c*=0x0, pszText=0x0 | out: puBuffLength=0x2fe82c*=0xf, pszText=0x0) returned 0x0 [0102.411] WbemDefPath:IWbemPath:GetText (in: This=0x3be890, lFlags=4, puBuffLength=0x2fe82c*=0xf, pszText="00000000000000" | out: puBuffLength=0x2fe82c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0102.415] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x3be890, puCount=0x2fe7f8 | out: puCount=0x2fe7f8*=0x2) returned 0x0 [0102.415] WbemDefPath:IWbemPath:GetText (in: This=0x3be890, lFlags=4, puBuffLength=0x2fe7f4*=0x0, pszText=0x0 | out: puBuffLength=0x2fe7f4*=0xf, pszText=0x0) returned 0x0 [0102.415] WbemDefPath:IWbemPath:GetText (in: This=0x3be890, lFlags=4, puBuffLength=0x2fe7f4*=0xf, pszText="00000000000000" | out: puBuffLength=0x2fe7f4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0102.415] IWbemClassObject:Get (in: This=0x3f6fe0, wszName="Manufacturer", lFlags=0, pVal=0x2fe7e0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x25218f8*=0, plFlavor=0x25218fc*=0 | out: pVal=0x2fe7e0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="HP", varVal2=0x0), pType=0x25218f8*=8, plFlavor=0x25218fc*=0) returned 0x0 [0102.415] SysStringByteLen (bstr="HP") returned 0x4 [0102.415] SysStringByteLen (bstr="HP") returned 0x4 [0102.416] IWbemClassObject:Get (in: This=0x3f6fe0, wszName="Manufacturer", lFlags=0, pVal=0x2fe7e8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x25218f8*=8, plFlavor=0x25218fc*=0 | out: pVal=0x2fe7e8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="HP", varVal2=0x0), pType=0x25218f8*=8, plFlavor=0x25218fc*=0) returned 0x0 [0102.416] SysStringByteLen (bstr="HP") returned 0x4 [0102.416] SysStringByteLen (bstr="HP") returned 0x4 [0102.498] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x3be890, puCount=0x2fe7f8 | out: puCount=0x2fe7f8*=0x2) returned 0x0 [0102.498] WbemDefPath:IWbemPath:GetText (in: This=0x3be890, lFlags=4, puBuffLength=0x2fe7f4*=0x0, pszText=0x0 | out: puBuffLength=0x2fe7f4*=0xf, pszText=0x0) returned 0x0 [0102.498] WbemDefPath:IWbemPath:GetText (in: This=0x3be890, lFlags=4, puBuffLength=0x2fe7f4*=0xf, pszText="00000000000000" | out: puBuffLength=0x2fe7f4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0102.498] IWbemClassObject:Get (in: This=0x3f6fe0, wszName="Model", lFlags=0, pVal=0x2fe7e0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2521a34*=0, plFlavor=0x2521a38*=0 | out: pVal=0x2fe7e0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="ProLiant DL180 G6", varVal2=0x0), pType=0x2521a34*=8, plFlavor=0x2521a38*=0) returned 0x0 [0102.498] SysStringByteLen (bstr="ProLiant DL180 G6") returned 0x22 [0102.498] SysStringByteLen (bstr="ProLiant DL180 G6") returned 0x22 [0102.498] IWbemClassObject:Get (in: This=0x3f6fe0, wszName="Model", lFlags=0, pVal=0x2fe7e8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2521a34*=8, plFlavor=0x2521a38*=0 | out: pVal=0x2fe7e8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="ProLiant DL180 G6", varVal2=0x0), pType=0x2521a34*=8, plFlavor=0x2521a38*=0) returned 0x0 [0102.498] SysStringByteLen (bstr="ProLiant DL180 G6") returned 0x22 [0102.498] SysStringByteLen (bstr="ProLiant DL180 G6") returned 0x22 [0103.199] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0103.219] CreatePipe (in: hReadPipe=0x2fe4ec, hWritePipe=0x2fe4e8, lpPipeAttributes=0x2fe46c, nSize=0x0 | out: hReadPipe=0x2fe4ec*=0x334, hWritePipe=0x2fe4e8*=0x338) returned 1 [0103.244] GetCurrentProcess () returned 0xffffffff [0103.244] GetCurrentProcess () returned 0xffffffff [0103.245] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0x334, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x2fe4f0, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x2fe4f0*=0x33c) returned 1 [0103.245] CloseHandle (hObject=0x334) returned 1 [0103.246] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0103.248] CoTaskMemAlloc (cb=0x20e) returned 0x3fd5b0 [0103.248] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x3fd5b0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop") returned 0x1a [0103.249] CoTaskMemFree (pv=0x3fd5b0) [0103.250] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"cmd.exe\" /c vssadmin.exe delete shadows /all /quiet", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\kEecfMwgj\\Desktop", lpStartupInfo=0x2fe40c*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x338, hStdError=0x0), lpProcessInformation=0x2523698 | out: lpCommandLine="\"cmd.exe\" /c vssadmin.exe delete shadows /all /quiet", lpProcessInformation=0x2523698*(hProcess=0x340, hThread=0x334, dwProcessId=0xe18, dwThreadId=0xe1c)) returned 1 [0104.043] CloseHandle (hObject=0x338) returned 1 [0104.077] GetConsoleOutputCP () returned 0x0 [0104.078] GetACP () returned 0x4e4 [0104.131] GetFileType (hFile=0x33c) returned 0x3 [0104.135] CloseHandle (hObject=0x334) returned 1 [0105.012] GetLogicalDrives () returned 0x4 [0105.013] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0x2fe100, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0105.017] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0108.402] CoTaskMemAlloc (cb=0x20c) returned 0x3fd5b0 [0108.402] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0x3fd5b0 | out: pszPath="C:\\Windows\\system32") returned 0x0 [0108.406] CoTaskMemFree (pv=0x3fd5b0) [0108.406] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x2fe2b8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0108.415] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x2fe364, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0108.650] EtwEventRegister () returned 0x0 [0108.662] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\Windows Session Manager.exe.config", nBufferLength=0x105, lpBuffer=0x2fdf30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\Windows Session Manager.exe.config", lpFilePart=0x0) returned 0x3d [0108.662] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fe178) returned 1 [0108.663] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\Windows Session Manager.exe.config" (normalized: "c:\\users\\keecfmwgj\\desktop\\windows session manager.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x2fe43c | out: lpFileInformation=0x2fe43c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0108.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fe174) returned 1 [0109.815] GetFullPathNameW (in: lpFileName="C:\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fe0b0, lpFilePart=0x0 | out: lpBuffer="C:\\readme.txt", lpFilePart=0x0) returned 0xd [0109.815] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fe5c8) returned 1 [0109.816] CreateFileW (lpFileName="C:\\readme.txt" (normalized: "c:\\readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x364 [0109.819] GetFileType (hFile=0x364) returned 0x1 [0109.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fe5c4) returned 1 [0109.819] GetFileType (hFile=0x364) returned 0x1 [0109.874] WriteFile (in: hFile=0x364, lpBuffer=0x253d918*, nNumberOfBytesToWrite=0x33e, lpNumberOfBytesWritten=0x2fe638, lpOverlapped=0x0 | out: lpBuffer=0x253d918*, lpNumberOfBytesWritten=0x2fe638*=0x33e, lpOverlapped=0x0) returned 1 [0109.876] CloseHandle (hObject=0x364) returned 1 [0110.322] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0110.322] CreatePipe (in: hReadPipe=0x2fe4ec, hWritePipe=0x2fe4e8, lpPipeAttributes=0x2fe46c, nSize=0x0 | out: hReadPipe=0x2fe4ec*=0x364, hWritePipe=0x2fe4e8*=0x360) returned 1 [0110.323] GetCurrentProcess () returned 0xffffffff [0110.323] GetCurrentProcess () returned 0xffffffff [0110.323] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0x364, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x2fe4f0, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x2fe4f0*=0x368) returned 1 [0110.323] CloseHandle (hObject=0x364) returned 1 [0110.324] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0110.324] CoTaskMemAlloc (cb=0x20e) returned 0x3f6b60 [0110.324] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x3f6b60 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop") returned 0x1a [0110.324] CoTaskMemFree (pv=0x3f6b60) [0110.324] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"cmd.exe\" /c vssadmin.exe delete shadows /all /quiet", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\kEecfMwgj\\Desktop", lpStartupInfo=0x2fe40c*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x360, hStdError=0x0), lpProcessInformation=0x254329c | out: lpCommandLine="\"cmd.exe\" /c vssadmin.exe delete shadows /all /quiet", lpProcessInformation=0x254329c*(hProcess=0x36c, hThread=0x364, dwProcessId=0xe4c, dwThreadId=0xe50)) returned 1 [0110.332] CloseHandle (hObject=0x360) returned 1 [0110.333] GetFileType (hFile=0x368) returned 0x3 [0110.333] CloseHandle (hObject=0x364) returned 1 [0111.065] BCryptGetFipsAlgorithmMode (in: pfEnabled=0x2fe0e4 | out: pfEnabled=0x2fe0e4) returned 0x0 [0111.212] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fe308) returned 1 [0111.213] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop", nBufferLength=0x105, lpBuffer=0x2fdde8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop", lpFilePart=0x0) returned 0x1a [0111.213] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\*", lpFindFileData=0x2fe0b8 | out: lpFindFileData=0x2fe0b8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x6f6bd360, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x6f6bd360, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3caa80 [0111.214] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fe0c0 | out: lpFindFileData=0x2fe0c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x6f6bd360, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x6f6bd360, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.214] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fe0c0 | out: lpFindFileData=0x2fe0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bed4550, ftCreationTime.dwHighDateTime=0x1d74dad, ftLastAccessTime.dwLowDateTime=0x88ab5580, ftLastAccessTime.dwHighDateTime=0x1d75491, ftLastWriteTime.dwLowDateTime=0x88ab5580, ftLastWriteTime.dwHighDateTime=0x1d75491, nFileSizeHigh=0x0, nFileSizeLow=0x8770, dwReserved0=0x0, dwReserved1=0x0, cFileName="-S33.bmp", cAlternateFileName="")) returned 1 [0111.214] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fe0c0 | out: lpFindFileData=0x2fe0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9306540, ftCreationTime.dwHighDateTime=0x1d75520, ftLastAccessTime.dwLowDateTime=0xf8d99e20, ftLastAccessTime.dwHighDateTime=0x1d75b58, ftLastWriteTime.dwLowDateTime=0xf8d99e20, ftLastWriteTime.dwHighDateTime=0x1d75b58, nFileSizeHigh=0x0, nFileSizeLow=0x261d, dwReserved0=0x0, dwReserved1=0x0, cFileName="677aEP3NVPVTqr.jpg", cAlternateFileName="677AEP~1.JPG")) returned 1 [0111.214] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fe0c0 | out: lpFindFileData=0x2fe0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6b5a9f0, ftCreationTime.dwHighDateTime=0x1d74e57, ftLastAccessTime.dwLowDateTime=0x4ccd0e70, ftLastAccessTime.dwHighDateTime=0x1d75a66, ftLastWriteTime.dwLowDateTime=0x4ccd0e70, ftLastWriteTime.dwHighDateTime=0x1d75a66, nFileSizeHigh=0x0, nFileSizeLow=0x13fcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="7h1t7zwQ4ZuOZlBh.pdf", cAlternateFileName="7H1T7Z~1.PDF")) returned 1 [0111.214] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fe0c0 | out: lpFindFileData=0x2fe0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba020160, ftCreationTime.dwHighDateTime=0x1d75441, ftLastAccessTime.dwLowDateTime=0x4e9c88e0, ftLastAccessTime.dwHighDateTime=0x1d75956, ftLastWriteTime.dwLowDateTime=0x4e9c88e0, ftLastWriteTime.dwHighDateTime=0x1d75956, nFileSizeHigh=0x0, nFileSizeLow=0x610b, dwReserved0=0x0, dwReserved1=0x0, cFileName="8KBcW4C3id-XWO3.bmp", cAlternateFileName="8KBCW4~1.BMP")) returned 1 [0111.214] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fe0c0 | out: lpFindFileData=0x2fe0c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9d12120, ftCreationTime.dwHighDateTime=0x1d75823, ftLastAccessTime.dwLowDateTime=0x99d97830, ftLastAccessTime.dwHighDateTime=0x1d75a3d, ftLastWriteTime.dwLowDateTime=0x99d97830, ftLastWriteTime.dwHighDateTime=0x1d75a3d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="9a-Wiva", cAlternateFileName="")) returned 1 [0111.214] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fe0c0 | out: lpFindFileData=0x2fe0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff593e0, ftCreationTime.dwHighDateTime=0x1d75bc6, ftLastAccessTime.dwLowDateTime=0xae0c18b0, ftLastAccessTime.dwHighDateTime=0x1d75c01, ftLastWriteTime.dwLowDateTime=0xae0c18b0, ftLastWriteTime.dwHighDateTime=0x1d75c01, nFileSizeHigh=0x0, nFileSizeLow=0x17897, dwReserved0=0x0, dwReserved1=0x0, cFileName="aL5T.mp3", cAlternateFileName="")) returned 1 [0111.214] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fe0c0 | out: lpFindFileData=0x2fe0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88906cb0, ftCreationTime.dwHighDateTime=0x1d7506e, ftLastAccessTime.dwLowDateTime=0x71151350, ftLastAccessTime.dwHighDateTime=0x1d75baf, ftLastWriteTime.dwLowDateTime=0x71151350, ftLastWriteTime.dwHighDateTime=0x1d75baf, nFileSizeHigh=0x0, nFileSizeLow=0xa513, dwReserved0=0x0, dwReserved1=0x0, cFileName="bliVjRUgxOohi.mp3", cAlternateFileName="BLIVJR~1.MP3")) returned 1 [0111.214] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fe0c0 | out: lpFindFileData=0x2fe0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a64b6b0, ftCreationTime.dwHighDateTime=0x1d74e2d, ftLastAccessTime.dwLowDateTime=0xaaa182a0, ftLastAccessTime.dwHighDateTime=0x1d7544f, ftLastWriteTime.dwLowDateTime=0xaaa182a0, ftLastWriteTime.dwHighDateTime=0x1d7544f, nFileSizeHigh=0x0, nFileSizeLow=0x1e96, dwReserved0=0x0, dwReserved1=0x0, cFileName="cFKKYeu.jpg", cAlternateFileName="")) returned 1 [0111.214] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fe0c0 | out: lpFindFileData=0x2fe0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58bb1510, ftCreationTime.dwHighDateTime=0x1d754ad, ftLastAccessTime.dwLowDateTime=0xeba2dc50, ftLastAccessTime.dwHighDateTime=0x1d75778, ftLastWriteTime.dwLowDateTime=0xeba2dc50, ftLastWriteTime.dwHighDateTime=0x1d75778, nFileSizeHigh=0x0, nFileSizeLow=0x17c45, dwReserved0=0x0, dwReserved1=0x0, cFileName="d280B.png", cAlternateFileName="")) returned 1 [0111.214] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fe0c0 | out: lpFindFileData=0x2fe0c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e7f4710, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0111.214] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fe0c0 | out: lpFindFileData=0x2fe0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0927c00, ftCreationTime.dwHighDateTime=0x1d75550, ftLastAccessTime.dwLowDateTime=0x1ddb8be0, ftLastAccessTime.dwHighDateTime=0x1d75a2b, ftLastWriteTime.dwLowDateTime=0x1ddb8be0, ftLastWriteTime.dwHighDateTime=0x1d75a2b, nFileSizeHigh=0x0, nFileSizeLow=0x12d62, dwReserved0=0x0, dwReserved1=0x0, cFileName="FdCidZt 3ToEAX.m4a", cAlternateFileName="FDCIDZ~1.M4A")) returned 1 [0111.214] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fe0c0 | out: lpFindFileData=0x2fe0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4de08c0, ftCreationTime.dwHighDateTime=0x1d75832, ftLastAccessTime.dwLowDateTime=0x7eb2f920, ftLastAccessTime.dwHighDateTime=0x1d75b62, ftLastWriteTime.dwLowDateTime=0x7eb2f920, ftLastWriteTime.dwHighDateTime=0x1d75b62, nFileSizeHigh=0x0, nFileSizeLow=0x13ef4, dwReserved0=0x0, dwReserved1=0x0, cFileName="g1B2.flv", cAlternateFileName="")) returned 1 [0111.214] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fe0c0 | out: lpFindFileData=0x2fe0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd023dd80, ftCreationTime.dwHighDateTime=0x1d7500c, ftLastAccessTime.dwLowDateTime=0x9acce680, ftLastAccessTime.dwHighDateTime=0x1d756e8, ftLastWriteTime.dwLowDateTime=0x9acce680, ftLastWriteTime.dwHighDateTime=0x1d756e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="gXJnC9SLmsW4N3mGiA.mp3", cAlternateFileName="GXJNC9~1.MP3")) returned 1 [0111.214] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fe0c0 | out: lpFindFileData=0x2fe0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe34b20f0, ftCreationTime.dwHighDateTime=0x1d74f3d, ftLastAccessTime.dwLowDateTime=0xfd1fb500, ftLastAccessTime.dwHighDateTime=0x1d75441, ftLastWriteTime.dwLowDateTime=0xfd1fb500, ftLastWriteTime.dwHighDateTime=0x1d75441, nFileSizeHigh=0x0, nFileSizeLow=0xabeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="HkCCIp7G6XkCf6WS7z.ppt", cAlternateFileName="HKCCIP~1.PPT")) returned 1 [0111.214] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fe0c0 | out: lpFindFileData=0x2fe0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x925186a0, ftCreationTime.dwHighDateTime=0x1d758aa, ftLastAccessTime.dwLowDateTime=0x944070d0, ftLastAccessTime.dwHighDateTime=0x1d75917, ftLastWriteTime.dwLowDateTime=0x944070d0, ftLastWriteTime.dwHighDateTime=0x1d75917, nFileSizeHigh=0x0, nFileSizeLow=0x11d0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="jTczcazHz-Ty WI.pptx", cAlternateFileName="JTCZCA~1.PPT")) returned 1 [0111.214] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fe0c0 | out: lpFindFileData=0x2fe0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53996110, ftCreationTime.dwHighDateTime=0x1d7572b, ftLastAccessTime.dwLowDateTime=0xad662780, ftLastAccessTime.dwHighDateTime=0x1d7589a, ftLastWriteTime.dwLowDateTime=0xad662780, ftLastWriteTime.dwHighDateTime=0x1d7589a, nFileSizeHigh=0x0, nFileSizeLow=0x4c90, dwReserved0=0x0, dwReserved1=0x0, cFileName="K1weDiwTL.rtf", cAlternateFileName="K1WEDI~1.RTF")) returned 1 [0111.215] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fe0c0 | out: lpFindFileData=0x2fe0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74fa5160, ftCreationTime.dwHighDateTime=0x1d75a7e, ftLastAccessTime.dwLowDateTime=0x7ef35ce0, ftLastAccessTime.dwHighDateTime=0x1d75bb7, ftLastWriteTime.dwLowDateTime=0x7ef35ce0, ftLastWriteTime.dwHighDateTime=0x1d75bb7, nFileSizeHigh=0x0, nFileSizeLow=0x18fbf, dwReserved0=0x0, dwReserved1=0x0, cFileName="kun5qpOiDRAfx.mkv", cAlternateFileName="KUN5QP~1.MKV")) returned 1 [0111.215] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fe0c0 | out: lpFindFileData=0x2fe0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31ca6fd0, ftCreationTime.dwHighDateTime=0x1d74fbe, ftLastAccessTime.dwLowDateTime=0xb16be6b0, ftLastAccessTime.dwHighDateTime=0x1d74fe6, ftLastWriteTime.dwLowDateTime=0xb16be6b0, ftLastWriteTime.dwHighDateTime=0x1d74fe6, nFileSizeHigh=0x0, nFileSizeLow=0x13663, dwReserved0=0x0, dwReserved1=0x0, cFileName="l98rm1bJy-gBu5Z 1x8.png", cAlternateFileName="L98RM1~1.PNG")) returned 1 [0111.215] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fe0c0 | out: lpFindFileData=0x2fe0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe23ea40, ftCreationTime.dwHighDateTime=0x1d75213, ftLastAccessTime.dwLowDateTime=0xc1a6a6d0, ftLastAccessTime.dwHighDateTime=0x1d75902, ftLastWriteTime.dwLowDateTime=0xc1a6a6d0, ftLastWriteTime.dwHighDateTime=0x1d75902, nFileSizeHigh=0x0, nFileSizeLow=0x181b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="lswQ5zN 6DyLI6rYuLN.flv", cAlternateFileName="LSWQ5Z~1.FLV")) returned 1 [0111.215] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fe0c0 | out: lpFindFileData=0x2fe0c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x995dc4c0, ftCreationTime.dwHighDateTime=0x1d75438, ftLastAccessTime.dwLowDateTime=0xeaa071b0, ftLastAccessTime.dwHighDateTime=0x1d75b00, ftLastWriteTime.dwLowDateTime=0xeaa071b0, ftLastWriteTime.dwHighDateTime=0x1d75b00, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LyNdnxnx", cAlternateFileName="")) returned 1 [0111.215] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fe0c0 | out: lpFindFileData=0x2fe0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ab10870, ftCreationTime.dwHighDateTime=0x1d7564a, ftLastAccessTime.dwLowDateTime=0xe795b80, ftLastAccessTime.dwHighDateTime=0x1d75c12, ftLastWriteTime.dwLowDateTime=0xe795b80, ftLastWriteTime.dwHighDateTime=0x1d75c12, nFileSizeHigh=0x0, nFileSizeLow=0xf4ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="lZ94.jpg", cAlternateFileName="")) returned 1 [0111.215] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fe0c0 | out: lpFindFileData=0x2fe0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec6c1ae0, ftCreationTime.dwHighDateTime=0x1d75145, ftLastAccessTime.dwLowDateTime=0x7a01c910, ftLastAccessTime.dwHighDateTime=0x1d75c52, ftLastWriteTime.dwLowDateTime=0x7a01c910, ftLastWriteTime.dwHighDateTime=0x1d75c52, nFileSizeHigh=0x0, nFileSizeLow=0x661b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NbGDojkSCHs.jpg", cAlternateFileName="NBGDOJ~1.JPG")) returned 1 [0111.215] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fe0c0 | out: lpFindFileData=0x2fe0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6fb3a20, ftCreationTime.dwHighDateTime=0x1d759aa, ftLastAccessTime.dwLowDateTime=0x8a815e50, ftLastAccessTime.dwHighDateTime=0x1d75c42, ftLastWriteTime.dwLowDateTime=0x8a815e50, ftLastWriteTime.dwHighDateTime=0x1d75c42, nFileSizeHigh=0x0, nFileSizeLow=0xac7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="P081AogxR.m4a", cAlternateFileName="P081AO~1.M4A")) returned 1 [0111.215] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fe0c0 | out: lpFindFileData=0x2fe0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15111380, ftCreationTime.dwHighDateTime=0x1d751da, ftLastAccessTime.dwLowDateTime=0xd4697ca0, ftLastAccessTime.dwHighDateTime=0x1d75260, ftLastWriteTime.dwLowDateTime=0xd4697ca0, ftLastWriteTime.dwHighDateTime=0x1d75260, nFileSizeHigh=0x0, nFileSizeLow=0x4239, dwReserved0=0x0, dwReserved1=0x0, cFileName="r7xFYddkriuGuw.mp3", cAlternateFileName="R7XFYD~1.MP3")) returned 1 [0111.215] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fe0c0 | out: lpFindFileData=0x2fe0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbef1f1a0, ftCreationTime.dwHighDateTime=0x1d74f3f, ftLastAccessTime.dwLowDateTime=0x385d6ee0, ftLastAccessTime.dwHighDateTime=0x1d75416, ftLastWriteTime.dwLowDateTime=0x385d6ee0, ftLastWriteTime.dwHighDateTime=0x1d75416, nFileSizeHigh=0x0, nFileSizeLow=0xf99c, dwReserved0=0x0, dwReserved1=0x0, cFileName="t w6B3Xd1y6z.pdf", cAlternateFileName="TW6B3X~1.PDF")) returned 1 [0111.215] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fe0c0 | out: lpFindFileData=0x2fe0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb307f250, ftCreationTime.dwHighDateTime=0x1d755ab, ftLastAccessTime.dwLowDateTime=0x652ec1b0, ftLastAccessTime.dwHighDateTime=0x1d755df, ftLastWriteTime.dwLowDateTime=0x652ec1b0, ftLastWriteTime.dwHighDateTime=0x1d755df, nFileSizeHigh=0x0, nFileSizeLow=0x1045b, dwReserved0=0x0, dwReserved1=0x0, cFileName="tLEVR66epfJvD2ES.gif", cAlternateFileName="TLEVR6~1.GIF")) returned 1 [0111.215] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fe0c0 | out: lpFindFileData=0x2fe0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd3151a0, ftCreationTime.dwHighDateTime=0x1d7553a, ftLastAccessTime.dwLowDateTime=0xa563ee20, ftLastAccessTime.dwHighDateTime=0x1d75bef, ftLastWriteTime.dwLowDateTime=0xa563ee20, ftLastWriteTime.dwHighDateTime=0x1d75bef, nFileSizeHigh=0x0, nFileSizeLow=0x613e, dwReserved0=0x0, dwReserved1=0x0, cFileName="tqZ-p5ul.mp3", cAlternateFileName="")) returned 1 [0111.215] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fe0c0 | out: lpFindFileData=0x2fe0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed01d250, ftCreationTime.dwHighDateTime=0x1d75934, ftLastAccessTime.dwLowDateTime=0x30e911b0, ftLastAccessTime.dwHighDateTime=0x1d7599c, ftLastWriteTime.dwLowDateTime=0x30e911b0, ftLastWriteTime.dwHighDateTime=0x1d7599c, nFileSizeHigh=0x0, nFileSizeLow=0x10e7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="vxAGTMx1M.mp4", cAlternateFileName="VXAGTM~1.MP4")) returned 1 [0111.215] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fe0c0 | out: lpFindFileData=0x2fe0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cd75900, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x4d6fef80, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0xa9d11000, ftLastWriteTime.dwHighDateTime=0x1d763b5, nFileSizeHigh=0x0, nFileSizeLow=0x45800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Session Manager.exe", cAlternateFileName="WINDOW~1.EXE")) returned 1 [0111.215] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fe0c0 | out: lpFindFileData=0x2fe0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x117797e0, ftCreationTime.dwHighDateTime=0x1d75b84, ftLastAccessTime.dwLowDateTime=0xafa89630, ftLastAccessTime.dwHighDateTime=0x1d75bf7, ftLastWriteTime.dwLowDateTime=0xafa89630, ftLastWriteTime.dwHighDateTime=0x1d75bf7, nFileSizeHigh=0x0, nFileSizeLow=0x83c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wraamh9KshzuZIWO.mkv", cAlternateFileName="WRAAMH~1.MKV")) returned 1 [0111.215] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fe0c0 | out: lpFindFileData=0x2fe0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfcbeba70, ftCreationTime.dwHighDateTime=0x1d74c58, ftLastAccessTime.dwLowDateTime=0x6a5e45c0, ftLastAccessTime.dwHighDateTime=0x1d756ed, ftLastWriteTime.dwLowDateTime=0x6a5e45c0, ftLastWriteTime.dwHighDateTime=0x1d756ed, nFileSizeHigh=0x0, nFileSizeLow=0xe984, dwReserved0=0x0, dwReserved1=0x0, cFileName="z5QZWcE3yYXJYqGIm.ots", cAlternateFileName="Z5QZWC~1.OTS")) returned 1 [0111.215] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fe0c0 | out: lpFindFileData=0x2fe0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6992c240, ftCreationTime.dwHighDateTime=0x1d75325, ftLastAccessTime.dwLowDateTime=0x9ec30640, ftLastAccessTime.dwHighDateTime=0x1d75bd2, ftLastWriteTime.dwLowDateTime=0x9ec30640, ftLastWriteTime.dwHighDateTime=0x1d75bd2, nFileSizeHigh=0x0, nFileSizeLow=0xc3d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="zNE QRjRnxJc7py_kOw6.mkv", cAlternateFileName="ZNEQRJ~1.MKV")) returned 1 [0111.215] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fe0c0 | out: lpFindFileData=0x2fe0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91404c90, ftCreationTime.dwHighDateTime=0x1d74d58, ftLastAccessTime.dwLowDateTime=0x87e964a0, ftLastAccessTime.dwHighDateTime=0x1d759ed, ftLastWriteTime.dwLowDateTime=0x87e964a0, ftLastWriteTime.dwHighDateTime=0x1d759ed, nFileSizeHigh=0x0, nFileSizeLow=0x1844a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZxlXhoDOmLBheQO.gif", cAlternateFileName="ZXLXHO~1.GIF")) returned 1 [0111.215] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fe0c0 | out: lpFindFileData=0x2fe0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91404c90, ftCreationTime.dwHighDateTime=0x1d74d58, ftLastAccessTime.dwLowDateTime=0x87e964a0, ftLastAccessTime.dwHighDateTime=0x1d759ed, ftLastWriteTime.dwLowDateTime=0x87e964a0, ftLastWriteTime.dwHighDateTime=0x1d759ed, nFileSizeHigh=0x0, nFileSizeLow=0x1844a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZxlXhoDOmLBheQO.gif", cAlternateFileName="ZXLXHO~1.GIF")) returned 0 [0111.216] FindClose (in: hFindFile=0x3caa80 | out: hFindFile=0x3caa80) returned 1 [0111.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fe078) returned 1 [0111.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fe2d8) returned 1 [0111.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fe308) returned 1 [0111.417] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop", nBufferLength=0x105, lpBuffer=0x2fdde8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop", lpFilePart=0x0) returned 0x1a [0111.418] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\*", lpFindFileData=0x2fe0b8 | out: lpFindFileData=0x2fe0b8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x6f6bd360, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x6f6bd360, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3caa80 [0111.418] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fe0c0 | out: lpFindFileData=0x2fe0c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x6f6bd360, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x6f6bd360, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.418] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fe0c0 | out: lpFindFileData=0x2fe0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bed4550, ftCreationTime.dwHighDateTime=0x1d74dad, ftLastAccessTime.dwLowDateTime=0x88ab5580, ftLastAccessTime.dwHighDateTime=0x1d75491, ftLastWriteTime.dwLowDateTime=0x88ab5580, ftLastWriteTime.dwHighDateTime=0x1d75491, nFileSizeHigh=0x0, nFileSizeLow=0x8770, dwReserved0=0x0, dwReserved1=0x0, cFileName="-S33.bmp", cAlternateFileName="")) returned 1 [0111.418] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fe0c0 | out: lpFindFileData=0x2fe0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9306540, ftCreationTime.dwHighDateTime=0x1d75520, ftLastAccessTime.dwLowDateTime=0xf8d99e20, ftLastAccessTime.dwHighDateTime=0x1d75b58, ftLastWriteTime.dwLowDateTime=0xf8d99e20, ftLastWriteTime.dwHighDateTime=0x1d75b58, nFileSizeHigh=0x0, nFileSizeLow=0x261d, dwReserved0=0x0, dwReserved1=0x0, cFileName="677aEP3NVPVTqr.jpg", cAlternateFileName="677AEP~1.JPG")) returned 1 [0111.418] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fe0c0 | out: lpFindFileData=0x2fe0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6b5a9f0, ftCreationTime.dwHighDateTime=0x1d74e57, ftLastAccessTime.dwLowDateTime=0x4ccd0e70, ftLastAccessTime.dwHighDateTime=0x1d75a66, ftLastWriteTime.dwLowDateTime=0x4ccd0e70, ftLastWriteTime.dwHighDateTime=0x1d75a66, nFileSizeHigh=0x0, nFileSizeLow=0x13fcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="7h1t7zwQ4ZuOZlBh.pdf", cAlternateFileName="7H1T7Z~1.PDF")) returned 1 [0111.418] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fe0c0 | out: lpFindFileData=0x2fe0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba020160, ftCreationTime.dwHighDateTime=0x1d75441, ftLastAccessTime.dwLowDateTime=0x4e9c88e0, ftLastAccessTime.dwHighDateTime=0x1d75956, ftLastWriteTime.dwLowDateTime=0x4e9c88e0, ftLastWriteTime.dwHighDateTime=0x1d75956, nFileSizeHigh=0x0, nFileSizeLow=0x610b, dwReserved0=0x0, dwReserved1=0x0, cFileName="8KBcW4C3id-XWO3.bmp", cAlternateFileName="8KBCW4~1.BMP")) returned 1 [0111.418] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fe0c0 | out: lpFindFileData=0x2fe0c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9d12120, ftCreationTime.dwHighDateTime=0x1d75823, ftLastAccessTime.dwLowDateTime=0x99d97830, ftLastAccessTime.dwHighDateTime=0x1d75a3d, ftLastWriteTime.dwLowDateTime=0x99d97830, ftLastWriteTime.dwHighDateTime=0x1d75a3d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="9a-Wiva", cAlternateFileName="")) returned 1 [0111.418] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fe0c0 | out: lpFindFileData=0x2fe0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff593e0, ftCreationTime.dwHighDateTime=0x1d75bc6, ftLastAccessTime.dwLowDateTime=0xae0c18b0, ftLastAccessTime.dwHighDateTime=0x1d75c01, ftLastWriteTime.dwLowDateTime=0xae0c18b0, ftLastWriteTime.dwHighDateTime=0x1d75c01, nFileSizeHigh=0x0, nFileSizeLow=0x17897, dwReserved0=0x0, dwReserved1=0x0, cFileName="aL5T.mp3", cAlternateFileName="")) returned 1 [0111.418] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fe0c0 | out: lpFindFileData=0x2fe0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88906cb0, ftCreationTime.dwHighDateTime=0x1d7506e, ftLastAccessTime.dwLowDateTime=0x71151350, ftLastAccessTime.dwHighDateTime=0x1d75baf, ftLastWriteTime.dwLowDateTime=0x71151350, ftLastWriteTime.dwHighDateTime=0x1d75baf, nFileSizeHigh=0x0, nFileSizeLow=0xa513, dwReserved0=0x0, dwReserved1=0x0, cFileName="bliVjRUgxOohi.mp3", cAlternateFileName="BLIVJR~1.MP3")) returned 1 [0111.418] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fe0c0 | out: lpFindFileData=0x2fe0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a64b6b0, ftCreationTime.dwHighDateTime=0x1d74e2d, ftLastAccessTime.dwLowDateTime=0xaaa182a0, ftLastAccessTime.dwHighDateTime=0x1d7544f, ftLastWriteTime.dwLowDateTime=0xaaa182a0, ftLastWriteTime.dwHighDateTime=0x1d7544f, nFileSizeHigh=0x0, nFileSizeLow=0x1e96, dwReserved0=0x0, dwReserved1=0x0, cFileName="cFKKYeu.jpg", cAlternateFileName="")) returned 1 [0111.418] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fe0c0 | out: lpFindFileData=0x2fe0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58bb1510, ftCreationTime.dwHighDateTime=0x1d754ad, ftLastAccessTime.dwLowDateTime=0xeba2dc50, ftLastAccessTime.dwHighDateTime=0x1d75778, ftLastWriteTime.dwLowDateTime=0xeba2dc50, ftLastWriteTime.dwHighDateTime=0x1d75778, nFileSizeHigh=0x0, nFileSizeLow=0x17c45, dwReserved0=0x0, dwReserved1=0x0, cFileName="d280B.png", cAlternateFileName="")) returned 1 [0111.418] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fe0c0 | out: lpFindFileData=0x2fe0c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e7f4710, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0111.418] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fe0c0 | out: lpFindFileData=0x2fe0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0927c00, ftCreationTime.dwHighDateTime=0x1d75550, ftLastAccessTime.dwLowDateTime=0x1ddb8be0, ftLastAccessTime.dwHighDateTime=0x1d75a2b, ftLastWriteTime.dwLowDateTime=0x1ddb8be0, ftLastWriteTime.dwHighDateTime=0x1d75a2b, nFileSizeHigh=0x0, nFileSizeLow=0x12d62, dwReserved0=0x0, dwReserved1=0x0, cFileName="FdCidZt 3ToEAX.m4a", cAlternateFileName="FDCIDZ~1.M4A")) returned 1 [0111.419] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fe0c0 | out: lpFindFileData=0x2fe0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4de08c0, ftCreationTime.dwHighDateTime=0x1d75832, ftLastAccessTime.dwLowDateTime=0x7eb2f920, ftLastAccessTime.dwHighDateTime=0x1d75b62, ftLastWriteTime.dwLowDateTime=0x7eb2f920, ftLastWriteTime.dwHighDateTime=0x1d75b62, nFileSizeHigh=0x0, nFileSizeLow=0x13ef4, dwReserved0=0x0, dwReserved1=0x0, cFileName="g1B2.flv", cAlternateFileName="")) returned 1 [0111.419] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fe0c0 | out: lpFindFileData=0x2fe0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd023dd80, ftCreationTime.dwHighDateTime=0x1d7500c, ftLastAccessTime.dwLowDateTime=0x9acce680, ftLastAccessTime.dwHighDateTime=0x1d756e8, ftLastWriteTime.dwLowDateTime=0x9acce680, ftLastWriteTime.dwHighDateTime=0x1d756e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="gXJnC9SLmsW4N3mGiA.mp3", cAlternateFileName="GXJNC9~1.MP3")) returned 1 [0111.419] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fe0c0 | out: lpFindFileData=0x2fe0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe34b20f0, ftCreationTime.dwHighDateTime=0x1d74f3d, ftLastAccessTime.dwLowDateTime=0xfd1fb500, ftLastAccessTime.dwHighDateTime=0x1d75441, ftLastWriteTime.dwLowDateTime=0xfd1fb500, ftLastWriteTime.dwHighDateTime=0x1d75441, nFileSizeHigh=0x0, nFileSizeLow=0xabeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="HkCCIp7G6XkCf6WS7z.ppt", cAlternateFileName="HKCCIP~1.PPT")) returned 1 [0111.419] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fe0c0 | out: lpFindFileData=0x2fe0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x925186a0, ftCreationTime.dwHighDateTime=0x1d758aa, ftLastAccessTime.dwLowDateTime=0x944070d0, ftLastAccessTime.dwHighDateTime=0x1d75917, ftLastWriteTime.dwLowDateTime=0x944070d0, ftLastWriteTime.dwHighDateTime=0x1d75917, nFileSizeHigh=0x0, nFileSizeLow=0x11d0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="jTczcazHz-Ty WI.pptx", cAlternateFileName="JTCZCA~1.PPT")) returned 1 [0111.419] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fe0c0 | out: lpFindFileData=0x2fe0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53996110, ftCreationTime.dwHighDateTime=0x1d7572b, ftLastAccessTime.dwLowDateTime=0xad662780, ftLastAccessTime.dwHighDateTime=0x1d7589a, ftLastWriteTime.dwLowDateTime=0xad662780, ftLastWriteTime.dwHighDateTime=0x1d7589a, nFileSizeHigh=0x0, nFileSizeLow=0x4c90, dwReserved0=0x0, dwReserved1=0x0, cFileName="K1weDiwTL.rtf", cAlternateFileName="K1WEDI~1.RTF")) returned 1 [0111.419] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fe0c0 | out: lpFindFileData=0x2fe0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74fa5160, ftCreationTime.dwHighDateTime=0x1d75a7e, ftLastAccessTime.dwLowDateTime=0x7ef35ce0, ftLastAccessTime.dwHighDateTime=0x1d75bb7, ftLastWriteTime.dwLowDateTime=0x7ef35ce0, ftLastWriteTime.dwHighDateTime=0x1d75bb7, nFileSizeHigh=0x0, nFileSizeLow=0x18fbf, dwReserved0=0x0, dwReserved1=0x0, cFileName="kun5qpOiDRAfx.mkv", cAlternateFileName="KUN5QP~1.MKV")) returned 1 [0111.419] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fe0c0 | out: lpFindFileData=0x2fe0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31ca6fd0, ftCreationTime.dwHighDateTime=0x1d74fbe, ftLastAccessTime.dwLowDateTime=0xb16be6b0, ftLastAccessTime.dwHighDateTime=0x1d74fe6, ftLastWriteTime.dwLowDateTime=0xb16be6b0, ftLastWriteTime.dwHighDateTime=0x1d74fe6, nFileSizeHigh=0x0, nFileSizeLow=0x13663, dwReserved0=0x0, dwReserved1=0x0, cFileName="l98rm1bJy-gBu5Z 1x8.png", cAlternateFileName="L98RM1~1.PNG")) returned 1 [0111.419] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fe0c0 | out: lpFindFileData=0x2fe0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe23ea40, ftCreationTime.dwHighDateTime=0x1d75213, ftLastAccessTime.dwLowDateTime=0xc1a6a6d0, ftLastAccessTime.dwHighDateTime=0x1d75902, ftLastWriteTime.dwLowDateTime=0xc1a6a6d0, ftLastWriteTime.dwHighDateTime=0x1d75902, nFileSizeHigh=0x0, nFileSizeLow=0x181b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="lswQ5zN 6DyLI6rYuLN.flv", cAlternateFileName="LSWQ5Z~1.FLV")) returned 1 [0111.419] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fe0c0 | out: lpFindFileData=0x2fe0c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x995dc4c0, ftCreationTime.dwHighDateTime=0x1d75438, ftLastAccessTime.dwLowDateTime=0xeaa071b0, ftLastAccessTime.dwHighDateTime=0x1d75b00, ftLastWriteTime.dwLowDateTime=0xeaa071b0, ftLastWriteTime.dwHighDateTime=0x1d75b00, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LyNdnxnx", cAlternateFileName="")) returned 1 [0111.419] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fe0c0 | out: lpFindFileData=0x2fe0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ab10870, ftCreationTime.dwHighDateTime=0x1d7564a, ftLastAccessTime.dwLowDateTime=0xe795b80, ftLastAccessTime.dwHighDateTime=0x1d75c12, ftLastWriteTime.dwLowDateTime=0xe795b80, ftLastWriteTime.dwHighDateTime=0x1d75c12, nFileSizeHigh=0x0, nFileSizeLow=0xf4ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="lZ94.jpg", cAlternateFileName="")) returned 1 [0111.419] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fe0c0 | out: lpFindFileData=0x2fe0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec6c1ae0, ftCreationTime.dwHighDateTime=0x1d75145, ftLastAccessTime.dwLowDateTime=0x7a01c910, ftLastAccessTime.dwHighDateTime=0x1d75c52, ftLastWriteTime.dwLowDateTime=0x7a01c910, ftLastWriteTime.dwHighDateTime=0x1d75c52, nFileSizeHigh=0x0, nFileSizeLow=0x661b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NbGDojkSCHs.jpg", cAlternateFileName="NBGDOJ~1.JPG")) returned 1 [0111.420] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fe0c0 | out: lpFindFileData=0x2fe0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6fb3a20, ftCreationTime.dwHighDateTime=0x1d759aa, ftLastAccessTime.dwLowDateTime=0x8a815e50, ftLastAccessTime.dwHighDateTime=0x1d75c42, ftLastWriteTime.dwLowDateTime=0x8a815e50, ftLastWriteTime.dwHighDateTime=0x1d75c42, nFileSizeHigh=0x0, nFileSizeLow=0xac7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="P081AogxR.m4a", cAlternateFileName="P081AO~1.M4A")) returned 1 [0111.420] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fe0c0 | out: lpFindFileData=0x2fe0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15111380, ftCreationTime.dwHighDateTime=0x1d751da, ftLastAccessTime.dwLowDateTime=0xd4697ca0, ftLastAccessTime.dwHighDateTime=0x1d75260, ftLastWriteTime.dwLowDateTime=0xd4697ca0, ftLastWriteTime.dwHighDateTime=0x1d75260, nFileSizeHigh=0x0, nFileSizeLow=0x4239, dwReserved0=0x0, dwReserved1=0x0, cFileName="r7xFYddkriuGuw.mp3", cAlternateFileName="R7XFYD~1.MP3")) returned 1 [0111.420] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fe0c0 | out: lpFindFileData=0x2fe0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbef1f1a0, ftCreationTime.dwHighDateTime=0x1d74f3f, ftLastAccessTime.dwLowDateTime=0x385d6ee0, ftLastAccessTime.dwHighDateTime=0x1d75416, ftLastWriteTime.dwLowDateTime=0x385d6ee0, ftLastWriteTime.dwHighDateTime=0x1d75416, nFileSizeHigh=0x0, nFileSizeLow=0xf99c, dwReserved0=0x0, dwReserved1=0x0, cFileName="t w6B3Xd1y6z.pdf", cAlternateFileName="TW6B3X~1.PDF")) returned 1 [0111.420] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fe0c0 | out: lpFindFileData=0x2fe0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb307f250, ftCreationTime.dwHighDateTime=0x1d755ab, ftLastAccessTime.dwLowDateTime=0x652ec1b0, ftLastAccessTime.dwHighDateTime=0x1d755df, ftLastWriteTime.dwLowDateTime=0x652ec1b0, ftLastWriteTime.dwHighDateTime=0x1d755df, nFileSizeHigh=0x0, nFileSizeLow=0x1045b, dwReserved0=0x0, dwReserved1=0x0, cFileName="tLEVR66epfJvD2ES.gif", cAlternateFileName="TLEVR6~1.GIF")) returned 1 [0111.420] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fe0c0 | out: lpFindFileData=0x2fe0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd3151a0, ftCreationTime.dwHighDateTime=0x1d7553a, ftLastAccessTime.dwLowDateTime=0xa563ee20, ftLastAccessTime.dwHighDateTime=0x1d75bef, ftLastWriteTime.dwLowDateTime=0xa563ee20, ftLastWriteTime.dwHighDateTime=0x1d75bef, nFileSizeHigh=0x0, nFileSizeLow=0x613e, dwReserved0=0x0, dwReserved1=0x0, cFileName="tqZ-p5ul.mp3", cAlternateFileName="")) returned 1 [0111.420] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fe0c0 | out: lpFindFileData=0x2fe0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed01d250, ftCreationTime.dwHighDateTime=0x1d75934, ftLastAccessTime.dwLowDateTime=0x30e911b0, ftLastAccessTime.dwHighDateTime=0x1d7599c, ftLastWriteTime.dwLowDateTime=0x30e911b0, ftLastWriteTime.dwHighDateTime=0x1d7599c, nFileSizeHigh=0x0, nFileSizeLow=0x10e7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="vxAGTMx1M.mp4", cAlternateFileName="VXAGTM~1.MP4")) returned 1 [0111.420] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fe0c0 | out: lpFindFileData=0x2fe0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cd75900, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x4d6fef80, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0xa9d11000, ftLastWriteTime.dwHighDateTime=0x1d763b5, nFileSizeHigh=0x0, nFileSizeLow=0x45800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Session Manager.exe", cAlternateFileName="WINDOW~1.EXE")) returned 1 [0111.420] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fe0c0 | out: lpFindFileData=0x2fe0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x117797e0, ftCreationTime.dwHighDateTime=0x1d75b84, ftLastAccessTime.dwLowDateTime=0xafa89630, ftLastAccessTime.dwHighDateTime=0x1d75bf7, ftLastWriteTime.dwLowDateTime=0xafa89630, ftLastWriteTime.dwHighDateTime=0x1d75bf7, nFileSizeHigh=0x0, nFileSizeLow=0x83c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wraamh9KshzuZIWO.mkv", cAlternateFileName="WRAAMH~1.MKV")) returned 1 [0111.420] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fe0c0 | out: lpFindFileData=0x2fe0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfcbeba70, ftCreationTime.dwHighDateTime=0x1d74c58, ftLastAccessTime.dwLowDateTime=0x6a5e45c0, ftLastAccessTime.dwHighDateTime=0x1d756ed, ftLastWriteTime.dwLowDateTime=0x6a5e45c0, ftLastWriteTime.dwHighDateTime=0x1d756ed, nFileSizeHigh=0x0, nFileSizeLow=0xe984, dwReserved0=0x0, dwReserved1=0x0, cFileName="z5QZWcE3yYXJYqGIm.ots", cAlternateFileName="Z5QZWC~1.OTS")) returned 1 [0111.420] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fe0c0 | out: lpFindFileData=0x2fe0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6992c240, ftCreationTime.dwHighDateTime=0x1d75325, ftLastAccessTime.dwLowDateTime=0x9ec30640, ftLastAccessTime.dwHighDateTime=0x1d75bd2, ftLastWriteTime.dwLowDateTime=0x9ec30640, ftLastWriteTime.dwHighDateTime=0x1d75bd2, nFileSizeHigh=0x0, nFileSizeLow=0xc3d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="zNE QRjRnxJc7py_kOw6.mkv", cAlternateFileName="ZNEQRJ~1.MKV")) returned 1 [0111.420] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fe0c0 | out: lpFindFileData=0x2fe0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91404c90, ftCreationTime.dwHighDateTime=0x1d74d58, ftLastAccessTime.dwLowDateTime=0x87e964a0, ftLastAccessTime.dwHighDateTime=0x1d759ed, ftLastWriteTime.dwLowDateTime=0x87e964a0, ftLastWriteTime.dwHighDateTime=0x1d759ed, nFileSizeHigh=0x0, nFileSizeLow=0x1844a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZxlXhoDOmLBheQO.gif", cAlternateFileName="ZXLXHO~1.GIF")) returned 1 [0111.420] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fe0c0 | out: lpFindFileData=0x2fe0c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0111.420] FindClose (in: hFindFile=0x3caa80 | out: hFindFile=0x3caa80) returned 1 [0111.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fe078) returned 1 [0111.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fe2d8) returned 1 [0111.512] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", nBufferLength=0x105, lpBuffer=0x2fde10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", lpFilePart=0x0) returned 0x23 [0112.167] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", nBufferLength=0x105, lpBuffer=0x2fd6fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", lpFilePart=0x0) returned 0x23 [0112.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fdc14) returned 1 [0112.167] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\-s33.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x360 [0112.167] GetFileType (hFile=0x360) returned 0x1 [0112.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fdc10) returned 1 [0112.168] GetFileType (hFile=0x360) returned 0x1 [0112.169] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp.Poteston", nBufferLength=0x105, lpBuffer=0x2fd6fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp.Poteston", lpFilePart=0x0) returned 0x2c [0112.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fdc14) returned 1 [0112.169] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp.Poteston" (normalized: "c:\\users\\keecfmwgj\\desktop\\-s33.bmp.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x364 [0112.173] GetFileType (hFile=0x364) returned 0x1 [0112.173] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fdc10) returned 1 [0112.173] GetFileType (hFile=0x364) returned 0x1 [0112.176] SetEndOfFile (hFile=0x364) returned 1 [0112.178] GetFileSize (in: hFile=0x360, lpFileSizeHigh=0x2fdcf8 | out: lpFileSizeHigh=0x2fdcf8*=0x0) returned 0x8770 [0112.687] ReadFile (in: hFile=0x360, lpBuffer=0x254a5d4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fdc9c, lpOverlapped=0x0 | out: lpBuffer=0x254a5d4*, lpNumberOfBytesRead=0x2fdc9c*=0x1000, lpOverlapped=0x0) returned 1 [0112.709] WriteFile (in: hFile=0x364, lpBuffer=0x254fcb0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x2fdc78, lpOverlapped=0x0 | out: lpBuffer=0x254fcb0*, lpNumberOfBytesWritten=0x2fdc78*=0x1000, lpOverlapped=0x0) returned 1 [0112.711] ReadFile (in: hFile=0x360, lpBuffer=0x254a5d4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fdc9c, lpOverlapped=0x0 | out: lpBuffer=0x254a5d4*, lpNumberOfBytesRead=0x2fdc9c*=0x1000, lpOverlapped=0x0) returned 1 [0112.711] WriteFile (in: hFile=0x364, lpBuffer=0x2550cec*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x2fdc78, lpOverlapped=0x0 | out: lpBuffer=0x2550cec*, lpNumberOfBytesWritten=0x2fdc78*=0x1000, lpOverlapped=0x0) returned 1 [0112.712] ReadFile (in: hFile=0x360, lpBuffer=0x254a5d4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fdc9c, lpOverlapped=0x0 | out: lpBuffer=0x254a5d4*, lpNumberOfBytesRead=0x2fdc9c*=0x1000, lpOverlapped=0x0) returned 1 [0112.715] WriteFile (in: hFile=0x364, lpBuffer=0x2551d34*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x2fdc78, lpOverlapped=0x0 | out: lpBuffer=0x2551d34*, lpNumberOfBytesWritten=0x2fdc78*=0x1000, lpOverlapped=0x0) returned 1 [0112.715] ReadFile (in: hFile=0x360, lpBuffer=0x254a5d4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fdc9c, lpOverlapped=0x0 | out: lpBuffer=0x254a5d4*, lpNumberOfBytesRead=0x2fdc9c*=0x1000, lpOverlapped=0x0) returned 1 [0112.716] WriteFile (in: hFile=0x364, lpBuffer=0x2552d70*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x2fdc78, lpOverlapped=0x0 | out: lpBuffer=0x2552d70*, lpNumberOfBytesWritten=0x2fdc78*=0x1000, lpOverlapped=0x0) returned 1 [0112.716] ReadFile (in: hFile=0x360, lpBuffer=0x254a5d4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fdc9c, lpOverlapped=0x0 | out: lpBuffer=0x254a5d4*, lpNumberOfBytesRead=0x2fdc9c*=0x1000, lpOverlapped=0x0) returned 1 [0112.717] WriteFile (in: hFile=0x364, lpBuffer=0x2553db8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x2fdc78, lpOverlapped=0x0 | out: lpBuffer=0x2553db8*, lpNumberOfBytesWritten=0x2fdc78*=0x1000, lpOverlapped=0x0) returned 1 [0112.717] ReadFile (in: hFile=0x360, lpBuffer=0x254a5d4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fdc9c, lpOverlapped=0x0 | out: lpBuffer=0x254a5d4*, lpNumberOfBytesRead=0x2fdc9c*=0x1000, lpOverlapped=0x0) returned 1 [0112.717] WriteFile (in: hFile=0x364, lpBuffer=0x2554df4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x2fdc78, lpOverlapped=0x0 | out: lpBuffer=0x2554df4*, lpNumberOfBytesWritten=0x2fdc78*=0x1000, lpOverlapped=0x0) returned 1 [0112.718] ReadFile (in: hFile=0x360, lpBuffer=0x254a5d4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fdc9c, lpOverlapped=0x0 | out: lpBuffer=0x254a5d4*, lpNumberOfBytesRead=0x2fdc9c*=0x1000, lpOverlapped=0x0) returned 1 [0112.718] WriteFile (in: hFile=0x364, lpBuffer=0x2555e3c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x2fdc78, lpOverlapped=0x0 | out: lpBuffer=0x2555e3c*, lpNumberOfBytesWritten=0x2fdc78*=0x1000, lpOverlapped=0x0) returned 1 [0112.719] ReadFile (in: hFile=0x360, lpBuffer=0x254a5d4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fdc9c, lpOverlapped=0x0 | out: lpBuffer=0x254a5d4*, lpNumberOfBytesRead=0x2fdc9c*=0x1000, lpOverlapped=0x0) returned 1 [0112.719] WriteFile (in: hFile=0x364, lpBuffer=0x2556e78*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x2fdc78, lpOverlapped=0x0 | out: lpBuffer=0x2556e78*, lpNumberOfBytesWritten=0x2fdc78*=0x1000, lpOverlapped=0x0) returned 1 [0112.719] ReadFile (in: hFile=0x360, lpBuffer=0x254a5d4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fdc9c, lpOverlapped=0x0 | out: lpBuffer=0x254a5d4*, lpNumberOfBytesRead=0x2fdc9c*=0x770, lpOverlapped=0x0) returned 1 [0112.723] WriteFile (in: hFile=0x364, lpBuffer=0x255863c*, nNumberOfBytesToWrite=0x780, lpNumberOfBytesWritten=0x2fdc60, lpOverlapped=0x0 | out: lpBuffer=0x255863c*, lpNumberOfBytesWritten=0x2fdc60*=0x780, lpOverlapped=0x0) returned 1 [0112.724] CloseHandle (hObject=0x364) returned 1 [0112.729] CloseHandle (hObject=0x360) returned 1 [0112.732] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\-s33.bmp")) returned 1 [0112.736] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", nBufferLength=0x105, lpBuffer=0x2fde10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", lpFilePart=0x0) returned 0x23 [0112.737] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", nBufferLength=0x105, lpBuffer=0x2fd6fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", lpFilePart=0x0) returned 0x23 [0112.737] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fdc14) returned 1 [0112.738] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\-s33.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0112.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fca30) returned 1 [0112.765] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\-s33.bmp")) returned 0 [0112.766] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", nBufferLength=0x105, lpBuffer=0x2fde10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", lpFilePart=0x0) returned 0x23 [0112.767] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", nBufferLength=0x105, lpBuffer=0x2fd6fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", lpFilePart=0x0) returned 0x23 [0112.767] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fdc14) returned 1 [0112.767] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\-s33.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0112.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fca30) returned 1 [0112.769] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\-s33.bmp")) returned 0 [0112.770] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", nBufferLength=0x105, lpBuffer=0x2fde10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", lpFilePart=0x0) returned 0x23 [0112.771] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", nBufferLength=0x105, lpBuffer=0x2fd6fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", lpFilePart=0x0) returned 0x23 [0112.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fdc14) returned 1 [0112.771] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\-s33.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0112.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fca30) returned 1 [0112.773] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\-s33.bmp")) returned 0 [0112.774] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", nBufferLength=0x105, lpBuffer=0x2fde10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", lpFilePart=0x0) returned 0x23 [0112.775] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", nBufferLength=0x105, lpBuffer=0x2fd6fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", lpFilePart=0x0) returned 0x23 [0112.775] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fdc14) returned 1 [0112.775] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\-s33.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0112.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fca30) returned 1 [0112.777] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\-s33.bmp")) returned 0 [0112.777] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", nBufferLength=0x105, lpBuffer=0x2fde10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", lpFilePart=0x0) returned 0x23 [0112.778] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", nBufferLength=0x105, lpBuffer=0x2fd6fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", lpFilePart=0x0) returned 0x23 [0112.778] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fdc14) returned 1 [0112.778] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\-s33.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0112.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fca30) returned 1 [0112.779] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\-s33.bmp")) returned 0 [0112.780] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", nBufferLength=0x105, lpBuffer=0x2fde10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", lpFilePart=0x0) returned 0x23 [0112.780] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", nBufferLength=0x105, lpBuffer=0x2fd6fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", lpFilePart=0x0) returned 0x23 [0112.780] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fdc14) returned 1 [0112.780] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\-s33.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0112.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fca30) returned 1 [0112.782] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\-s33.bmp")) returned 0 [0112.782] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", nBufferLength=0x105, lpBuffer=0x2fde10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", lpFilePart=0x0) returned 0x23 [0112.783] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", nBufferLength=0x105, lpBuffer=0x2fd6fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", lpFilePart=0x0) returned 0x23 [0112.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fdc14) returned 1 [0112.783] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\-s33.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0112.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fca30) returned 1 [0112.784] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\-s33.bmp")) returned 0 [0112.785] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", nBufferLength=0x105, lpBuffer=0x2fde10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", lpFilePart=0x0) returned 0x23 [0112.785] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", nBufferLength=0x105, lpBuffer=0x2fd6fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", lpFilePart=0x0) returned 0x23 [0112.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fdc14) returned 1 [0112.785] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\-s33.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0112.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fca30) returned 1 [0112.787] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\-s33.bmp")) returned 0 [0112.787] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", nBufferLength=0x105, lpBuffer=0x2fde10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", lpFilePart=0x0) returned 0x23 [0112.788] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", nBufferLength=0x105, lpBuffer=0x2fd6fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", lpFilePart=0x0) returned 0x23 [0112.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fdc14) returned 1 [0112.788] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\-s33.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0112.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fca30) returned 1 [0112.790] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\-s33.bmp")) returned 0 [0112.790] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", nBufferLength=0x105, lpBuffer=0x2fde10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", lpFilePart=0x0) returned 0x23 [0112.790] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", nBufferLength=0x105, lpBuffer=0x2fd6fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", lpFilePart=0x0) returned 0x23 [0112.790] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fdc14) returned 1 [0112.791] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\-s33.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0112.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fca30) returned 1 [0112.792] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\-s33.bmp")) returned 0 [0112.792] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", nBufferLength=0x105, lpBuffer=0x2fde10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", lpFilePart=0x0) returned 0x23 [0112.793] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", nBufferLength=0x105, lpBuffer=0x2fd6fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", lpFilePart=0x0) returned 0x23 [0112.793] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fdc14) returned 1 [0112.793] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\-s33.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0112.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fca30) returned 1 [0112.794] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\-s33.bmp")) returned 0 [0112.795] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", nBufferLength=0x105, lpBuffer=0x2fde10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", lpFilePart=0x0) returned 0x23 [0112.795] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", nBufferLength=0x105, lpBuffer=0x2fd6fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", lpFilePart=0x0) returned 0x23 [0112.796] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fdc14) returned 1 [0112.796] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\-s33.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0112.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fca30) returned 1 [0112.797] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\-s33.bmp")) returned 0 [0112.797] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", nBufferLength=0x105, lpBuffer=0x2fde10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", lpFilePart=0x0) returned 0x23 [0112.798] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", nBufferLength=0x105, lpBuffer=0x2fd6fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", lpFilePart=0x0) returned 0x23 [0112.798] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fdc14) returned 1 [0112.798] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\-s33.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0112.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fca30) returned 1 [0112.799] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\-s33.bmp")) returned 0 [0112.799] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", nBufferLength=0x105, lpBuffer=0x2fde10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", lpFilePart=0x0) returned 0x23 [0112.800] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", nBufferLength=0x105, lpBuffer=0x2fd6fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", lpFilePart=0x0) returned 0x23 [0112.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fdc14) returned 1 [0112.800] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\-s33.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0112.801] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fca30) returned 1 [0112.801] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\-s33.bmp")) returned 0 [0112.802] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", nBufferLength=0x105, lpBuffer=0x2fde10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", lpFilePart=0x0) returned 0x23 [0112.802] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", nBufferLength=0x105, lpBuffer=0x2fd6fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", lpFilePart=0x0) returned 0x23 [0112.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fdc14) returned 1 [0112.802] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\-s33.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0112.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fca30) returned 1 [0112.803] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\-s33.bmp")) returned 0 [0112.804] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", nBufferLength=0x105, lpBuffer=0x2fde10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", lpFilePart=0x0) returned 0x23 [0112.804] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", nBufferLength=0x105, lpBuffer=0x2fd6fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", lpFilePart=0x0) returned 0x23 [0112.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fdc14) returned 1 [0112.804] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\-s33.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0112.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fca30) returned 1 [0112.806] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\-s33.bmp")) returned 0 [0112.806] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", nBufferLength=0x105, lpBuffer=0x2fde10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", lpFilePart=0x0) returned 0x23 [0112.807] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", nBufferLength=0x105, lpBuffer=0x2fd6fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", lpFilePart=0x0) returned 0x23 [0112.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fdc14) returned 1 [0112.807] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\-s33.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0112.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fca30) returned 1 [0112.809] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\-s33.bmp")) returned 0 [0112.809] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", nBufferLength=0x105, lpBuffer=0x2fde10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", lpFilePart=0x0) returned 0x23 [0112.810] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", nBufferLength=0x105, lpBuffer=0x2fd6fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", lpFilePart=0x0) returned 0x23 [0112.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fdc14) returned 1 [0112.810] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\-s33.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0112.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fca30) returned 1 [0112.811] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\-s33.bmp")) returned 0 [0112.812] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", nBufferLength=0x105, lpBuffer=0x2fde10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", lpFilePart=0x0) returned 0x23 [0112.812] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", nBufferLength=0x105, lpBuffer=0x2fd6fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", lpFilePart=0x0) returned 0x23 [0112.812] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fdc14) returned 1 [0112.812] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\-s33.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0112.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fca30) returned 1 [0112.814] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\-s33.bmp")) returned 0 [0112.815] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", nBufferLength=0x105, lpBuffer=0x2fde10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", lpFilePart=0x0) returned 0x23 [0112.815] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", nBufferLength=0x105, lpBuffer=0x2fd6fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", lpFilePart=0x0) returned 0x23 [0112.815] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fdc14) returned 1 [0112.815] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\-s33.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0112.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fca30) returned 1 [0112.817] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\-s33.bmp")) returned 0 [0112.817] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", nBufferLength=0x105, lpBuffer=0x2fde10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", lpFilePart=0x0) returned 0x23 [0112.817] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", nBufferLength=0x105, lpBuffer=0x2fd6fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", lpFilePart=0x0) returned 0x23 [0112.817] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fdc14) returned 1 [0112.818] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\-s33.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0112.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fca30) returned 1 [0112.819] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\-s33.bmp")) returned 0 [0112.819] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", nBufferLength=0x105, lpBuffer=0x2fde10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", lpFilePart=0x0) returned 0x23 [0112.820] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", nBufferLength=0x105, lpBuffer=0x2fd6fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", lpFilePart=0x0) returned 0x23 [0112.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fdc14) returned 1 [0112.820] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\-s33.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0112.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fca30) returned 1 [0112.822] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\-s33.bmp")) returned 0 [0112.822] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", nBufferLength=0x105, lpBuffer=0x2fde10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", lpFilePart=0x0) returned 0x23 [0112.823] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", nBufferLength=0x105, lpBuffer=0x2fd6fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", lpFilePart=0x0) returned 0x23 [0112.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fdc14) returned 1 [0112.823] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\-s33.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0112.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fca30) returned 1 [0112.824] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\-s33.bmp")) returned 0 [0112.824] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", nBufferLength=0x105, lpBuffer=0x2fde10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", lpFilePart=0x0) returned 0x23 [0112.825] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", nBufferLength=0x105, lpBuffer=0x2fd6fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", lpFilePart=0x0) returned 0x23 [0112.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fdc14) returned 1 [0112.825] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\-s33.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0112.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fca30) returned 1 [0112.826] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\-s33.bmp")) returned 0 [0112.827] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", nBufferLength=0x105, lpBuffer=0x2fde10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", lpFilePart=0x0) returned 0x23 [0112.827] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", nBufferLength=0x105, lpBuffer=0x2fd6fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", lpFilePart=0x0) returned 0x23 [0112.827] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fdc14) returned 1 [0112.827] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\-s33.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0112.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fca30) returned 1 [0112.828] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\-s33.bmp")) returned 0 [0112.829] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", nBufferLength=0x105, lpBuffer=0x2fde10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", lpFilePart=0x0) returned 0x23 [0112.829] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", nBufferLength=0x105, lpBuffer=0x2fd6fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", lpFilePart=0x0) returned 0x23 [0112.829] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fdc14) returned 1 [0112.829] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\-s33.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0112.830] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fca30) returned 1 [0112.830] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\-s33.bmp")) returned 0 [0112.831] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", nBufferLength=0x105, lpBuffer=0x2fde10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", lpFilePart=0x0) returned 0x23 [0112.831] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", nBufferLength=0x105, lpBuffer=0x2fd6fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", lpFilePart=0x0) returned 0x23 [0112.831] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fdc14) returned 1 [0112.831] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\-s33.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0112.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fca30) returned 1 [0112.833] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\-s33.bmp")) returned 0 [0112.833] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", nBufferLength=0x105, lpBuffer=0x2fde10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", lpFilePart=0x0) returned 0x23 [0112.833] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", nBufferLength=0x105, lpBuffer=0x2fd6fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", lpFilePart=0x0) returned 0x23 [0112.833] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fdc14) returned 1 [0112.834] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\-s33.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0112.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fca30) returned 1 [0112.835] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\-s33.bmp")) returned 0 [0112.835] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", nBufferLength=0x105, lpBuffer=0x2fde10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", lpFilePart=0x0) returned 0x23 [0112.835] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", nBufferLength=0x105, lpBuffer=0x2fd6fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", lpFilePart=0x0) returned 0x23 [0112.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fdc14) returned 1 [0112.836] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\-s33.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0112.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fca30) returned 1 [0112.837] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\-s33.bmp")) returned 0 [0112.837] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", nBufferLength=0x105, lpBuffer=0x2fde10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", lpFilePart=0x0) returned 0x23 [0112.838] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", nBufferLength=0x105, lpBuffer=0x2fd6fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp", lpFilePart=0x0) returned 0x23 [0112.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fdc14) returned 1 [0112.838] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\-s33.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0112.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fca30) returned 1 [0112.840] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\-S33.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\-s33.bmp")) returned 0 [0112.841] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fddcc) returned 1 [0112.841] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva", nBufferLength=0x105, lpBuffer=0x2fd8ac, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva", lpFilePart=0x0) returned 0x22 [0112.841] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\*", lpFindFileData=0x2fdb7c | out: lpFindFileData=0x2fdb7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9d12120, ftCreationTime.dwHighDateTime=0x1d75823, ftLastAccessTime.dwLowDateTime=0x99d97830, ftLastAccessTime.dwHighDateTime=0x1d75a3d, ftLastWriteTime.dwLowDateTime=0x99d97830, ftLastWriteTime.dwHighDateTime=0x1d75a3d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3caa80 [0112.841] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fdb84 | out: lpFindFileData=0x2fdb84*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9d12120, ftCreationTime.dwHighDateTime=0x1d75823, ftLastAccessTime.dwLowDateTime=0x99d97830, ftLastAccessTime.dwHighDateTime=0x1d75a3d, ftLastWriteTime.dwLowDateTime=0x99d97830, ftLastWriteTime.dwHighDateTime=0x1d75a3d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0112.841] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fdb84 | out: lpFindFileData=0x2fdb84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a259e00, ftCreationTime.dwHighDateTime=0x1d75152, ftLastAccessTime.dwLowDateTime=0xfb85e200, ftLastAccessTime.dwHighDateTime=0x1d757ed, ftLastWriteTime.dwLowDateTime=0xfb85e200, ftLastWriteTime.dwHighDateTime=0x1d757ed, nFileSizeHigh=0x0, nFileSizeLow=0x74a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="DJIlxXh.pptx", cAlternateFileName="DJILXX~1.PPT")) returned 1 [0112.842] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fdb84 | out: lpFindFileData=0x2fdb84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x753a590, ftCreationTime.dwHighDateTime=0x1d75b2c, ftLastAccessTime.dwLowDateTime=0xf6451970, ftLastAccessTime.dwHighDateTime=0x1d75c7d, ftLastWriteTime.dwLowDateTime=0xf6451970, ftLastWriteTime.dwHighDateTime=0x1d75c7d, nFileSizeHigh=0x0, nFileSizeLow=0x143ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="epH-_N hU0l.jpg", cAlternateFileName="EPH-_N~1.JPG")) returned 1 [0112.842] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fdb84 | out: lpFindFileData=0x2fdb84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f6dae0, ftCreationTime.dwHighDateTime=0x1d7589e, ftLastAccessTime.dwLowDateTime=0xfe06eee0, ftLastAccessTime.dwHighDateTime=0x1d75b1f, ftLastWriteTime.dwLowDateTime=0xfe06eee0, ftLastWriteTime.dwHighDateTime=0x1d75b1f, nFileSizeHigh=0x0, nFileSizeLow=0x2db6, dwReserved0=0x0, dwReserved1=0x0, cFileName="nGUytBPJlqP.rtf", cAlternateFileName="NGUYTB~1.RTF")) returned 1 [0112.842] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fdb84 | out: lpFindFileData=0x2fdb84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x101d7440, ftCreationTime.dwHighDateTime=0x1d74c1c, ftLastAccessTime.dwLowDateTime=0x98a39950, ftLastAccessTime.dwHighDateTime=0x1d756a5, ftLastWriteTime.dwLowDateTime=0x98a39950, ftLastWriteTime.dwHighDateTime=0x1d756a5, nFileSizeHigh=0x0, nFileSizeLow=0xe429, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPnXfcP7CFdFT0XeBuv6.ots", cAlternateFileName="SPNXFC~1.OTS")) returned 1 [0112.842] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fdb84 | out: lpFindFileData=0x2fdb84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99c74970, ftCreationTime.dwHighDateTime=0x1d74fad, ftLastAccessTime.dwLowDateTime=0x2a799300, ftLastAccessTime.dwHighDateTime=0x1d755ae, ftLastWriteTime.dwLowDateTime=0x2a799300, ftLastWriteTime.dwHighDateTime=0x1d755ae, nFileSizeHigh=0x0, nFileSizeLow=0x45f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="UapJbgd7.flv", cAlternateFileName="")) returned 1 [0112.842] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fdb84 | out: lpFindFileData=0x2fdb84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x273b0da0, ftCreationTime.dwHighDateTime=0x1d74e0a, ftLastAccessTime.dwLowDateTime=0x76ca0820, ftLastAccessTime.dwHighDateTime=0x1d75095, ftLastWriteTime.dwLowDateTime=0x76ca0820, ftLastWriteTime.dwHighDateTime=0x1d75095, nFileSizeHigh=0x0, nFileSizeLow=0xcd74, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc-4n.png", cAlternateFileName="")) returned 1 [0112.842] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fdb84 | out: lpFindFileData=0x2fdb84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x273b0da0, ftCreationTime.dwHighDateTime=0x1d74e0a, ftLastAccessTime.dwLowDateTime=0x76ca0820, ftLastAccessTime.dwHighDateTime=0x1d75095, ftLastWriteTime.dwLowDateTime=0x76ca0820, ftLastWriteTime.dwHighDateTime=0x1d75095, nFileSizeHigh=0x0, nFileSizeLow=0xcd74, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc-4n.png", cAlternateFileName="")) returned 0 [0112.842] FindClose (in: hFindFile=0x3caa80 | out: hFindFile=0x3caa80) returned 1 [0112.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fdb3c) returned 1 [0112.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fdd9c) returned 1 [0112.842] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fddcc) returned 1 [0112.842] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva", nBufferLength=0x105, lpBuffer=0x2fd8ac, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva", lpFilePart=0x0) returned 0x22 [0112.843] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\*", lpFindFileData=0x2fdb7c | out: lpFindFileData=0x2fdb7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9d12120, ftCreationTime.dwHighDateTime=0x1d75823, ftLastAccessTime.dwLowDateTime=0x99d97830, ftLastAccessTime.dwHighDateTime=0x1d75a3d, ftLastWriteTime.dwLowDateTime=0x99d97830, ftLastWriteTime.dwHighDateTime=0x1d75a3d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3caa80 [0112.843] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fdb84 | out: lpFindFileData=0x2fdb84*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9d12120, ftCreationTime.dwHighDateTime=0x1d75823, ftLastAccessTime.dwLowDateTime=0x99d97830, ftLastAccessTime.dwHighDateTime=0x1d75a3d, ftLastWriteTime.dwLowDateTime=0x99d97830, ftLastWriteTime.dwHighDateTime=0x1d75a3d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0112.843] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fdb84 | out: lpFindFileData=0x2fdb84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a259e00, ftCreationTime.dwHighDateTime=0x1d75152, ftLastAccessTime.dwLowDateTime=0xfb85e200, ftLastAccessTime.dwHighDateTime=0x1d757ed, ftLastWriteTime.dwLowDateTime=0xfb85e200, ftLastWriteTime.dwHighDateTime=0x1d757ed, nFileSizeHigh=0x0, nFileSizeLow=0x74a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="DJIlxXh.pptx", cAlternateFileName="DJILXX~1.PPT")) returned 1 [0112.843] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fdb84 | out: lpFindFileData=0x2fdb84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x753a590, ftCreationTime.dwHighDateTime=0x1d75b2c, ftLastAccessTime.dwLowDateTime=0xf6451970, ftLastAccessTime.dwHighDateTime=0x1d75c7d, ftLastWriteTime.dwLowDateTime=0xf6451970, ftLastWriteTime.dwHighDateTime=0x1d75c7d, nFileSizeHigh=0x0, nFileSizeLow=0x143ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="epH-_N hU0l.jpg", cAlternateFileName="EPH-_N~1.JPG")) returned 1 [0112.843] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fdb84 | out: lpFindFileData=0x2fdb84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f6dae0, ftCreationTime.dwHighDateTime=0x1d7589e, ftLastAccessTime.dwLowDateTime=0xfe06eee0, ftLastAccessTime.dwHighDateTime=0x1d75b1f, ftLastWriteTime.dwLowDateTime=0xfe06eee0, ftLastWriteTime.dwHighDateTime=0x1d75b1f, nFileSizeHigh=0x0, nFileSizeLow=0x2db6, dwReserved0=0x0, dwReserved1=0x0, cFileName="nGUytBPJlqP.rtf", cAlternateFileName="NGUYTB~1.RTF")) returned 1 [0112.843] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fdb84 | out: lpFindFileData=0x2fdb84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x101d7440, ftCreationTime.dwHighDateTime=0x1d74c1c, ftLastAccessTime.dwLowDateTime=0x98a39950, ftLastAccessTime.dwHighDateTime=0x1d756a5, ftLastWriteTime.dwLowDateTime=0x98a39950, ftLastWriteTime.dwHighDateTime=0x1d756a5, nFileSizeHigh=0x0, nFileSizeLow=0xe429, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPnXfcP7CFdFT0XeBuv6.ots", cAlternateFileName="SPNXFC~1.OTS")) returned 1 [0112.844] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fdb84 | out: lpFindFileData=0x2fdb84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99c74970, ftCreationTime.dwHighDateTime=0x1d74fad, ftLastAccessTime.dwLowDateTime=0x2a799300, ftLastAccessTime.dwHighDateTime=0x1d755ae, ftLastWriteTime.dwLowDateTime=0x2a799300, ftLastWriteTime.dwHighDateTime=0x1d755ae, nFileSizeHigh=0x0, nFileSizeLow=0x45f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="UapJbgd7.flv", cAlternateFileName="")) returned 1 [0112.844] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fdb84 | out: lpFindFileData=0x2fdb84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x273b0da0, ftCreationTime.dwHighDateTime=0x1d74e0a, ftLastAccessTime.dwLowDateTime=0x76ca0820, ftLastAccessTime.dwHighDateTime=0x1d75095, ftLastWriteTime.dwLowDateTime=0x76ca0820, ftLastWriteTime.dwHighDateTime=0x1d75095, nFileSizeHigh=0x0, nFileSizeLow=0xcd74, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc-4n.png", cAlternateFileName="")) returned 1 [0112.844] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fdb84 | out: lpFindFileData=0x2fdb84*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0112.844] FindClose (in: hFindFile=0x3caa80 | out: hFindFile=0x3caa80) returned 1 [0112.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fdb3c) returned 1 [0112.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fdd9c) returned 1 [0112.844] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\DJIlxXh.pptx", nBufferLength=0x105, lpBuffer=0x2fd8d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\DJIlxXh.pptx", lpFilePart=0x0) returned 0x2f [0112.844] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\DJIlxXh.pptx", nBufferLength=0x105, lpBuffer=0x2fd1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\DJIlxXh.pptx", lpFilePart=0x0) returned 0x2f [0112.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd6d8) returned 1 [0112.845] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\DJIlxXh.pptx" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\djilxxh.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x360 [0112.845] GetFileType (hFile=0x360) returned 0x1 [0112.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fd6d4) returned 1 [0112.845] GetFileType (hFile=0x360) returned 0x1 [0112.845] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\DJIlxXh.pptx.Poteston", nBufferLength=0x105, lpBuffer=0x2fd1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\DJIlxXh.pptx.Poteston", lpFilePart=0x0) returned 0x38 [0112.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd6d8) returned 1 [0112.845] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\DJIlxXh.pptx.Poteston" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\djilxxh.pptx.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x364 [0112.846] GetFileType (hFile=0x364) returned 0x1 [0112.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fd6d4) returned 1 [0112.847] GetFileType (hFile=0x364) returned 0x1 [0112.847] SetEndOfFile (hFile=0x364) returned 1 [0112.847] GetFileSize (in: hFile=0x360, lpFileSizeHigh=0x2fd7bc | out: lpFileSizeHigh=0x2fd7bc*=0x0) returned 0x74a9 [0112.847] ReadFile (in: hFile=0x360, lpBuffer=0x2573128, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x2573128*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0112.848] WriteFile (in: hFile=0x364, lpBuffer=0x25745d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x2fd73c, lpOverlapped=0x0 | out: lpBuffer=0x25745d8*, lpNumberOfBytesWritten=0x2fd73c*=0x1000, lpOverlapped=0x0) returned 1 [0112.849] ReadFile (in: hFile=0x360, lpBuffer=0x2573128, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x2573128*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0112.850] WriteFile (in: hFile=0x364, lpBuffer=0x2575620*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x2fd73c, lpOverlapped=0x0 | out: lpBuffer=0x2575620*, lpNumberOfBytesWritten=0x2fd73c*=0x1000, lpOverlapped=0x0) returned 1 [0112.850] ReadFile (in: hFile=0x360, lpBuffer=0x2573128, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x2573128*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0112.850] WriteFile (in: hFile=0x364, lpBuffer=0x257665c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x2fd73c, lpOverlapped=0x0 | out: lpBuffer=0x257665c*, lpNumberOfBytesWritten=0x2fd73c*=0x1000, lpOverlapped=0x0) returned 1 [0112.850] ReadFile (in: hFile=0x360, lpBuffer=0x2573128, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x2573128*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0112.851] WriteFile (in: hFile=0x364, lpBuffer=0x25776a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x2fd73c, lpOverlapped=0x0 | out: lpBuffer=0x25776a4*, lpNumberOfBytesWritten=0x2fd73c*=0x1000, lpOverlapped=0x0) returned 1 [0112.851] ReadFile (in: hFile=0x360, lpBuffer=0x2573128, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x2573128*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0112.851] WriteFile (in: hFile=0x364, lpBuffer=0x25786e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x2fd73c, lpOverlapped=0x0 | out: lpBuffer=0x25786e0*, lpNumberOfBytesWritten=0x2fd73c*=0x1000, lpOverlapped=0x0) returned 1 [0112.851] ReadFile (in: hFile=0x360, lpBuffer=0x2573128, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x2573128*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0112.852] WriteFile (in: hFile=0x364, lpBuffer=0x2579728*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x2fd73c, lpOverlapped=0x0 | out: lpBuffer=0x2579728*, lpNumberOfBytesWritten=0x2fd73c*=0x1000, lpOverlapped=0x0) returned 1 [0112.852] ReadFile (in: hFile=0x360, lpBuffer=0x2573128, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x2573128*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0112.853] ReadFile (in: hFile=0x360, lpBuffer=0x2573128, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x2573128*, lpNumberOfBytesRead=0x2fd760*=0x4a9, lpOverlapped=0x0) returned 1 [0112.854] WriteFile (in: hFile=0x364, lpBuffer=0x257bc58*, nNumberOfBytesToWrite=0x4b0, lpNumberOfBytesWritten=0x2fd724, lpOverlapped=0x0 | out: lpBuffer=0x257bc58*, lpNumberOfBytesWritten=0x2fd724*=0x4b0, lpOverlapped=0x0) returned 1 [0112.855] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\DJIlxXh.pptx" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\djilxxh.pptx")) returned 1 [0112.857] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\DJIlxXh.pptx", nBufferLength=0x105, lpBuffer=0x2fd8d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\DJIlxXh.pptx", lpFilePart=0x0) returned 0x2f [0112.857] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\DJIlxXh.pptx", nBufferLength=0x105, lpBuffer=0x2fd1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\DJIlxXh.pptx", lpFilePart=0x0) returned 0x2f [0112.857] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd6d8) returned 1 [0112.858] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\DJIlxXh.pptx" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\djilxxh.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0112.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc4f8) returned 1 [0112.859] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\DJIlxXh.pptx" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\djilxxh.pptx")) returned 0 [0112.859] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\DJIlxXh.pptx", nBufferLength=0x105, lpBuffer=0x2fd8d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\DJIlxXh.pptx", lpFilePart=0x0) returned 0x2f [0112.860] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\DJIlxXh.pptx", nBufferLength=0x105, lpBuffer=0x2fd1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\DJIlxXh.pptx", lpFilePart=0x0) returned 0x2f [0112.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd6d8) returned 1 [0112.860] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\DJIlxXh.pptx" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\djilxxh.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0112.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc4f8) returned 1 [0112.861] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\DJIlxXh.pptx" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\djilxxh.pptx")) returned 0 [0112.861] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\DJIlxXh.pptx", nBufferLength=0x105, lpBuffer=0x2fd8d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\DJIlxXh.pptx", lpFilePart=0x0) returned 0x2f [0112.861] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\DJIlxXh.pptx", nBufferLength=0x105, lpBuffer=0x2fd1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\DJIlxXh.pptx", lpFilePart=0x0) returned 0x2f [0112.861] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd6d8) returned 1 [0112.862] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\DJIlxXh.pptx" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\djilxxh.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0112.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc4f8) returned 1 [0112.863] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\DJIlxXh.pptx" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\djilxxh.pptx")) returned 0 [0112.863] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\DJIlxXh.pptx", nBufferLength=0x105, lpBuffer=0x2fd8d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\DJIlxXh.pptx", lpFilePart=0x0) returned 0x2f [0112.863] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\DJIlxXh.pptx", nBufferLength=0x105, lpBuffer=0x2fd1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\DJIlxXh.pptx", lpFilePart=0x0) returned 0x2f [0112.863] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd6d8) returned 1 [0112.864] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\DJIlxXh.pptx" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\djilxxh.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0112.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc4f8) returned 1 [0112.865] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\DJIlxXh.pptx" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\djilxxh.pptx")) returned 0 [0112.865] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\DJIlxXh.pptx", nBufferLength=0x105, lpBuffer=0x2fd8d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\DJIlxXh.pptx", lpFilePart=0x0) returned 0x2f [0112.866] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\DJIlxXh.pptx", nBufferLength=0x105, lpBuffer=0x2fd1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\DJIlxXh.pptx", lpFilePart=0x0) returned 0x2f [0112.866] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd6d8) returned 1 [0112.866] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\DJIlxXh.pptx" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\djilxxh.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0112.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc4f8) returned 1 [0112.867] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\DJIlxXh.pptx" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\djilxxh.pptx")) returned 0 [0112.867] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\epH-_N hU0l.jpg", nBufferLength=0x105, lpBuffer=0x2fd8d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\epH-_N hU0l.jpg", lpFilePart=0x0) returned 0x32 [0112.868] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\epH-_N hU0l.jpg", nBufferLength=0x105, lpBuffer=0x2fd1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\epH-_N hU0l.jpg", lpFilePart=0x0) returned 0x32 [0112.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd6d8) returned 1 [0112.868] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\epH-_N hU0l.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\eph-_n hu0l.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x360 [0112.868] GetFileType (hFile=0x360) returned 0x1 [0112.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fd6d4) returned 1 [0112.868] GetFileType (hFile=0x360) returned 0x1 [0112.868] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\epH-_N hU0l.jpg.Poteston", nBufferLength=0x105, lpBuffer=0x2fd1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\epH-_N hU0l.jpg.Poteston", lpFilePart=0x0) returned 0x3b [0112.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd6d8) returned 1 [0112.868] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\epH-_N hU0l.jpg.Poteston" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\eph-_n hu0l.jpg.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x364 [0112.869] GetFileType (hFile=0x364) returned 0x1 [0112.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fd6d4) returned 1 [0112.869] GetFileType (hFile=0x364) returned 0x1 [0112.869] SetEndOfFile (hFile=0x364) returned 1 [0112.870] ReadFile (in: hFile=0x360, lpBuffer=0x25817b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x25817b8*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0112.873] ReadFile (in: hFile=0x360, lpBuffer=0x25817b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x25817b8*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0112.874] WriteFile (in: hFile=0x364, lpBuffer=0x2583cb0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x2fd73c, lpOverlapped=0x0 | out: lpBuffer=0x2583cb0*, lpNumberOfBytesWritten=0x2fd73c*=0x1000, lpOverlapped=0x0) returned 1 [0112.874] ReadFile (in: hFile=0x360, lpBuffer=0x25817b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x25817b8*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0112.874] ReadFile (in: hFile=0x360, lpBuffer=0x25817b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x25817b8*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0112.875] WriteFile (in: hFile=0x364, lpBuffer=0x2585d34*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x2fd73c, lpOverlapped=0x0 | out: lpBuffer=0x2585d34*, lpNumberOfBytesWritten=0x2fd73c*=0x1000, lpOverlapped=0x0) returned 1 [0112.875] ReadFile (in: hFile=0x360, lpBuffer=0x25817b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x25817b8*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0112.875] ReadFile (in: hFile=0x360, lpBuffer=0x25817b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x25817b8*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0112.875] WriteFile (in: hFile=0x364, lpBuffer=0x2587db8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x2fd73c, lpOverlapped=0x0 | out: lpBuffer=0x2587db8*, lpNumberOfBytesWritten=0x2fd73c*=0x1000, lpOverlapped=0x0) returned 1 [0112.876] ReadFile (in: hFile=0x360, lpBuffer=0x25817b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x25817b8*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0112.876] ReadFile (in: hFile=0x360, lpBuffer=0x25817b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x25817b8*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0112.876] WriteFile (in: hFile=0x364, lpBuffer=0x2589e3c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x2fd73c, lpOverlapped=0x0 | out: lpBuffer=0x2589e3c*, lpNumberOfBytesWritten=0x2fd73c*=0x1000, lpOverlapped=0x0) returned 1 [0112.877] ReadFile (in: hFile=0x360, lpBuffer=0x25817b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x25817b8*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0112.877] ReadFile (in: hFile=0x360, lpBuffer=0x25817b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x25817b8*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0112.877] WriteFile (in: hFile=0x364, lpBuffer=0x258bec0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x2fd73c, lpOverlapped=0x0 | out: lpBuffer=0x258bec0*, lpNumberOfBytesWritten=0x2fd73c*=0x1000, lpOverlapped=0x0) returned 1 [0112.877] ReadFile (in: hFile=0x360, lpBuffer=0x25817b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x25817b8*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0112.878] ReadFile (in: hFile=0x360, lpBuffer=0x25817b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x25817b8*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0112.878] WriteFile (in: hFile=0x364, lpBuffer=0x258df44*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x2fd73c, lpOverlapped=0x0 | out: lpBuffer=0x258df44*, lpNumberOfBytesWritten=0x2fd73c*=0x1000, lpOverlapped=0x0) returned 1 [0112.878] ReadFile (in: hFile=0x360, lpBuffer=0x25817b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x25817b8*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0112.878] ReadFile (in: hFile=0x360, lpBuffer=0x25817b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x25817b8*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0112.879] WriteFile (in: hFile=0x364, lpBuffer=0x258ffc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x2fd73c, lpOverlapped=0x0 | out: lpBuffer=0x258ffc8*, lpNumberOfBytesWritten=0x2fd73c*=0x1000, lpOverlapped=0x0) returned 1 [0112.879] ReadFile (in: hFile=0x360, lpBuffer=0x25817b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x25817b8*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0112.880] WriteFile (in: hFile=0x364, lpBuffer=0x2591010*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x2fd73c, lpOverlapped=0x0 | out: lpBuffer=0x2591010*, lpNumberOfBytesWritten=0x2fd73c*=0x1000, lpOverlapped=0x0) returned 1 [0112.880] ReadFile (in: hFile=0x360, lpBuffer=0x25817b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x25817b8*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0112.880] ReadFile (in: hFile=0x360, lpBuffer=0x25817b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x25817b8*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0112.881] WriteFile (in: hFile=0x364, lpBuffer=0x2593094*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x2fd73c, lpOverlapped=0x0 | out: lpBuffer=0x2593094*, lpNumberOfBytesWritten=0x2fd73c*=0x1000, lpOverlapped=0x0) returned 1 [0112.881] ReadFile (in: hFile=0x360, lpBuffer=0x25817b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x25817b8*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0112.881] ReadFile (in: hFile=0x360, lpBuffer=0x25817b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x25817b8*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0112.882] WriteFile (in: hFile=0x364, lpBuffer=0x2595118*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x2fd73c, lpOverlapped=0x0 | out: lpBuffer=0x2595118*, lpNumberOfBytesWritten=0x2fd73c*=0x1000, lpOverlapped=0x0) returned 1 [0112.882] ReadFile (in: hFile=0x360, lpBuffer=0x25817b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x25817b8*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0112.882] ReadFile (in: hFile=0x360, lpBuffer=0x25817b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x25817b8*, lpNumberOfBytesRead=0x2fd760*=0x3ee, lpOverlapped=0x0) returned 1 [0112.883] WriteFile (in: hFile=0x364, lpBuffer=0x2597588*, nNumberOfBytesToWrite=0x3f0, lpNumberOfBytesWritten=0x2fd724, lpOverlapped=0x0 | out: lpBuffer=0x2597588*, lpNumberOfBytesWritten=0x2fd724*=0x3f0, lpOverlapped=0x0) returned 1 [0112.883] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\epH-_N hU0l.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\eph-_n hu0l.jpg")) returned 1 [0112.885] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\epH-_N hU0l.jpg", nBufferLength=0x105, lpBuffer=0x2fd8d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\epH-_N hU0l.jpg", lpFilePart=0x0) returned 0x32 [0112.886] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\epH-_N hU0l.jpg", nBufferLength=0x105, lpBuffer=0x2fd1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\epH-_N hU0l.jpg", lpFilePart=0x0) returned 0x32 [0112.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd6d8) returned 1 [0112.886] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\epH-_N hU0l.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\eph-_n hu0l.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0112.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc4f8) returned 1 [0112.887] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\epH-_N hU0l.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\eph-_n hu0l.jpg")) returned 0 [0112.888] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\epH-_N hU0l.jpg", nBufferLength=0x105, lpBuffer=0x2fd8d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\epH-_N hU0l.jpg", lpFilePart=0x0) returned 0x32 [0112.888] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\epH-_N hU0l.jpg", nBufferLength=0x105, lpBuffer=0x2fd1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\epH-_N hU0l.jpg", lpFilePart=0x0) returned 0x32 [0112.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd6d8) returned 1 [0112.888] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\epH-_N hU0l.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\eph-_n hu0l.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0112.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc4f8) returned 1 [0112.890] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\epH-_N hU0l.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\eph-_n hu0l.jpg")) returned 0 [0112.890] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\epH-_N hU0l.jpg", nBufferLength=0x105, lpBuffer=0x2fd8d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\epH-_N hU0l.jpg", lpFilePart=0x0) returned 0x32 [0112.890] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\epH-_N hU0l.jpg", nBufferLength=0x105, lpBuffer=0x2fd1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\epH-_N hU0l.jpg", lpFilePart=0x0) returned 0x32 [0112.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd6d8) returned 1 [0112.891] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\epH-_N hU0l.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\eph-_n hu0l.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0112.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc4f8) returned 1 [0112.892] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\epH-_N hU0l.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\eph-_n hu0l.jpg")) returned 0 [0112.892] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\epH-_N hU0l.jpg", nBufferLength=0x105, lpBuffer=0x2fd8d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\epH-_N hU0l.jpg", lpFilePart=0x0) returned 0x32 [0112.893] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\epH-_N hU0l.jpg", nBufferLength=0x105, lpBuffer=0x2fd1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\epH-_N hU0l.jpg", lpFilePart=0x0) returned 0x32 [0112.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd6d8) returned 1 [0112.893] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\epH-_N hU0l.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\eph-_n hu0l.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0112.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc4f8) returned 1 [0112.894] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\epH-_N hU0l.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\eph-_n hu0l.jpg")) returned 0 [0112.894] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\epH-_N hU0l.jpg", nBufferLength=0x105, lpBuffer=0x2fd8d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\epH-_N hU0l.jpg", lpFilePart=0x0) returned 0x32 [0112.895] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\epH-_N hU0l.jpg", nBufferLength=0x105, lpBuffer=0x2fd1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\epH-_N hU0l.jpg", lpFilePart=0x0) returned 0x32 [0112.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd6d8) returned 1 [0112.895] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\epH-_N hU0l.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\eph-_n hu0l.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0112.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc4f8) returned 1 [0112.896] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\epH-_N hU0l.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\eph-_n hu0l.jpg")) returned 0 [0112.896] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\nGUytBPJlqP.rtf", nBufferLength=0x105, lpBuffer=0x2fd8d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\nGUytBPJlqP.rtf", lpFilePart=0x0) returned 0x32 [0112.896] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\nGUytBPJlqP.rtf", nBufferLength=0x105, lpBuffer=0x2fd1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\nGUytBPJlqP.rtf", lpFilePart=0x0) returned 0x32 [0112.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd6d8) returned 1 [0112.897] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\nGUytBPJlqP.rtf" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\nguytbpjlqp.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x360 [0112.897] GetFileType (hFile=0x360) returned 0x1 [0112.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fd6d4) returned 1 [0112.897] GetFileType (hFile=0x360) returned 0x1 [0112.897] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\nGUytBPJlqP.rtf.Poteston", nBufferLength=0x105, lpBuffer=0x2fd1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\nGUytBPJlqP.rtf.Poteston", lpFilePart=0x0) returned 0x3b [0112.897] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd6d8) returned 1 [0112.897] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\nGUytBPJlqP.rtf.Poteston" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\nguytbpjlqp.rtf.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x364 [0112.898] GetFileType (hFile=0x364) returned 0x1 [0112.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fd6d4) returned 1 [0112.898] GetFileType (hFile=0x364) returned 0x1 [0112.898] SetEndOfFile (hFile=0x364) returned 1 [0112.899] ReadFile (in: hFile=0x360, lpBuffer=0x259d184, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x259d184*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0112.900] ReadFile (in: hFile=0x360, lpBuffer=0x259d184, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x259d184*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0112.901] WriteFile (in: hFile=0x364, lpBuffer=0x259f67c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x2fd73c, lpOverlapped=0x0 | out: lpBuffer=0x259f67c*, lpNumberOfBytesWritten=0x2fd73c*=0x1000, lpOverlapped=0x0) returned 1 [0112.901] ReadFile (in: hFile=0x360, lpBuffer=0x259d184, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x259d184*, lpNumberOfBytesRead=0x2fd760*=0xdb6, lpOverlapped=0x0) returned 1 [0112.902] WriteFile (in: hFile=0x364, lpBuffer=0x25a1480*, nNumberOfBytesToWrite=0xdc0, lpNumberOfBytesWritten=0x2fd724, lpOverlapped=0x0 | out: lpBuffer=0x25a1480*, lpNumberOfBytesWritten=0x2fd724*=0xdc0, lpOverlapped=0x0) returned 1 [0112.903] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\nGUytBPJlqP.rtf" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\nguytbpjlqp.rtf")) returned 1 [0112.904] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\nGUytBPJlqP.rtf", nBufferLength=0x105, lpBuffer=0x2fd8d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\nGUytBPJlqP.rtf", lpFilePart=0x0) returned 0x32 [0112.904] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\nGUytBPJlqP.rtf", nBufferLength=0x105, lpBuffer=0x2fd1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\nGUytBPJlqP.rtf", lpFilePart=0x0) returned 0x32 [0112.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd6d8) returned 1 [0112.905] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\nGUytBPJlqP.rtf" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\nguytbpjlqp.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0112.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc4f8) returned 1 [0112.906] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\nGUytBPJlqP.rtf" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\nguytbpjlqp.rtf")) returned 0 [0112.906] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\nGUytBPJlqP.rtf", nBufferLength=0x105, lpBuffer=0x2fd8d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\nGUytBPJlqP.rtf", lpFilePart=0x0) returned 0x32 [0112.906] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\nGUytBPJlqP.rtf", nBufferLength=0x105, lpBuffer=0x2fd1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\nGUytBPJlqP.rtf", lpFilePart=0x0) returned 0x32 [0112.906] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd6d8) returned 1 [0112.907] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\nGUytBPJlqP.rtf" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\nguytbpjlqp.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0112.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc4f8) returned 1 [0112.908] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\nGUytBPJlqP.rtf" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\nguytbpjlqp.rtf")) returned 0 [0112.908] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\nGUytBPJlqP.rtf", nBufferLength=0x105, lpBuffer=0x2fd8d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\nGUytBPJlqP.rtf", lpFilePart=0x0) returned 0x32 [0112.909] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\nGUytBPJlqP.rtf", nBufferLength=0x105, lpBuffer=0x2fd1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\nGUytBPJlqP.rtf", lpFilePart=0x0) returned 0x32 [0112.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd6d8) returned 1 [0112.909] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\nGUytBPJlqP.rtf" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\nguytbpjlqp.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0112.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc4f8) returned 1 [0112.910] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\nGUytBPJlqP.rtf" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\nguytbpjlqp.rtf")) returned 0 [0112.910] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\nGUytBPJlqP.rtf", nBufferLength=0x105, lpBuffer=0x2fd8d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\nGUytBPJlqP.rtf", lpFilePart=0x0) returned 0x32 [0112.910] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\nGUytBPJlqP.rtf", nBufferLength=0x105, lpBuffer=0x2fd1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\nGUytBPJlqP.rtf", lpFilePart=0x0) returned 0x32 [0112.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd6d8) returned 1 [0112.911] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\nGUytBPJlqP.rtf" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\nguytbpjlqp.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0112.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc4f8) returned 1 [0112.912] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\nGUytBPJlqP.rtf" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\nguytbpjlqp.rtf")) returned 0 [0112.912] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\nGUytBPJlqP.rtf", nBufferLength=0x105, lpBuffer=0x2fd8d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\nGUytBPJlqP.rtf", lpFilePart=0x0) returned 0x32 [0112.912] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\nGUytBPJlqP.rtf", nBufferLength=0x105, lpBuffer=0x2fd1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\nGUytBPJlqP.rtf", lpFilePart=0x0) returned 0x32 [0112.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd6d8) returned 1 [0112.912] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\nGUytBPJlqP.rtf" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\nguytbpjlqp.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0112.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc4f8) returned 1 [0112.914] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\nGUytBPJlqP.rtf" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\nguytbpjlqp.rtf")) returned 0 [0112.914] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\SPnXfcP7CFdFT0XeBuv6.ots", nBufferLength=0x105, lpBuffer=0x2fd8d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\SPnXfcP7CFdFT0XeBuv6.ots", lpFilePart=0x0) returned 0x3b [0112.914] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\SPnXfcP7CFdFT0XeBuv6.ots", nBufferLength=0x105, lpBuffer=0x2fd1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\SPnXfcP7CFdFT0XeBuv6.ots", lpFilePart=0x0) returned 0x3b [0112.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd6d8) returned 1 [0112.914] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\SPnXfcP7CFdFT0XeBuv6.ots" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\spnxfcp7cfdft0xebuv6.ots"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x360 [0112.915] GetFileType (hFile=0x360) returned 0x1 [0112.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fd6d4) returned 1 [0112.915] GetFileType (hFile=0x360) returned 0x1 [0112.915] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\SPnXfcP7CFdFT0XeBuv6.ots.Poteston", nBufferLength=0x105, lpBuffer=0x2fd1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\SPnXfcP7CFdFT0XeBuv6.ots.Poteston", lpFilePart=0x0) returned 0x44 [0112.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd6d8) returned 1 [0112.915] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\SPnXfcP7CFdFT0XeBuv6.ots.Poteston" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\spnxfcp7cfdft0xebuv6.ots.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x364 [0112.916] GetFileType (hFile=0x364) returned 0x1 [0112.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fd6d4) returned 1 [0112.916] GetFileType (hFile=0x364) returned 0x1 [0112.916] SetEndOfFile (hFile=0x364) returned 1 [0112.917] ReadFile (in: hFile=0x360, lpBuffer=0x25a7104, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x25a7104*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0112.919] ReadFile (in: hFile=0x360, lpBuffer=0x25a7104, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x25a7104*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0112.920] WriteFile (in: hFile=0x364, lpBuffer=0x25a95fc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x2fd73c, lpOverlapped=0x0 | out: lpBuffer=0x25a95fc*, lpNumberOfBytesWritten=0x2fd73c*=0x1000, lpOverlapped=0x0) returned 1 [0112.920] ReadFile (in: hFile=0x360, lpBuffer=0x25a7104, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x25a7104*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0112.920] ReadFile (in: hFile=0x360, lpBuffer=0x25a7104, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x25a7104*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0112.921] WriteFile (in: hFile=0x364, lpBuffer=0x25ab680*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x2fd73c, lpOverlapped=0x0 | out: lpBuffer=0x25ab680*, lpNumberOfBytesWritten=0x2fd73c*=0x1000, lpOverlapped=0x0) returned 1 [0112.921] ReadFile (in: hFile=0x360, lpBuffer=0x25a7104, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x25a7104*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0112.921] ReadFile (in: hFile=0x360, lpBuffer=0x25a7104, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x25a7104*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0112.922] WriteFile (in: hFile=0x364, lpBuffer=0x25ad704*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x2fd73c, lpOverlapped=0x0 | out: lpBuffer=0x25ad704*, lpNumberOfBytesWritten=0x2fd73c*=0x1000, lpOverlapped=0x0) returned 1 [0112.922] ReadFile (in: hFile=0x360, lpBuffer=0x25a7104, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x25a7104*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0112.922] ReadFile (in: hFile=0x360, lpBuffer=0x25a7104, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x25a7104*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0112.923] WriteFile (in: hFile=0x364, lpBuffer=0x25af788*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x2fd73c, lpOverlapped=0x0 | out: lpBuffer=0x25af788*, lpNumberOfBytesWritten=0x2fd73c*=0x1000, lpOverlapped=0x0) returned 1 [0112.923] ReadFile (in: hFile=0x360, lpBuffer=0x25a7104, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x25a7104*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0112.923] ReadFile (in: hFile=0x360, lpBuffer=0x25a7104, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x25a7104*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0112.924] WriteFile (in: hFile=0x364, lpBuffer=0x25b180c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x2fd73c, lpOverlapped=0x0 | out: lpBuffer=0x25b180c*, lpNumberOfBytesWritten=0x2fd73c*=0x1000, lpOverlapped=0x0) returned 1 [0112.924] ReadFile (in: hFile=0x360, lpBuffer=0x25a7104, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x25a7104*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0112.925] ReadFile (in: hFile=0x360, lpBuffer=0x25a7104, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x25a7104*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0112.925] WriteFile (in: hFile=0x364, lpBuffer=0x25b3890*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x2fd73c, lpOverlapped=0x0 | out: lpBuffer=0x25b3890*, lpNumberOfBytesWritten=0x2fd73c*=0x1000, lpOverlapped=0x0) returned 1 [0112.925] ReadFile (in: hFile=0x360, lpBuffer=0x25a7104, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x25a7104*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0112.926] ReadFile (in: hFile=0x360, lpBuffer=0x25a7104, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x25a7104*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0112.926] WriteFile (in: hFile=0x364, lpBuffer=0x25b5914*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x2fd73c, lpOverlapped=0x0 | out: lpBuffer=0x25b5914*, lpNumberOfBytesWritten=0x2fd73c*=0x1000, lpOverlapped=0x0) returned 1 [0112.926] ReadFile (in: hFile=0x360, lpBuffer=0x25a7104, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x25a7104*, lpNumberOfBytesRead=0x2fd760*=0x429, lpOverlapped=0x0) returned 1 [0112.927] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\SPnXfcP7CFdFT0XeBuv6.ots" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\spnxfcp7cfdft0xebuv6.ots")) returned 1 [0112.929] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\SPnXfcP7CFdFT0XeBuv6.ots", nBufferLength=0x105, lpBuffer=0x2fd8d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\SPnXfcP7CFdFT0XeBuv6.ots", lpFilePart=0x0) returned 0x3b [0112.929] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\SPnXfcP7CFdFT0XeBuv6.ots", nBufferLength=0x105, lpBuffer=0x2fd1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\SPnXfcP7CFdFT0XeBuv6.ots", lpFilePart=0x0) returned 0x3b [0112.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd6d8) returned 1 [0112.929] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\SPnXfcP7CFdFT0XeBuv6.ots" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\spnxfcp7cfdft0xebuv6.ots"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0112.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc4f8) returned 1 [0112.931] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\SPnXfcP7CFdFT0XeBuv6.ots" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\spnxfcp7cfdft0xebuv6.ots")) returned 0 [0112.931] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\SPnXfcP7CFdFT0XeBuv6.ots", nBufferLength=0x105, lpBuffer=0x2fd8d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\SPnXfcP7CFdFT0XeBuv6.ots", lpFilePart=0x0) returned 0x3b [0112.931] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\SPnXfcP7CFdFT0XeBuv6.ots", nBufferLength=0x105, lpBuffer=0x2fd1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\SPnXfcP7CFdFT0XeBuv6.ots", lpFilePart=0x0) returned 0x3b [0112.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd6d8) returned 1 [0112.931] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\SPnXfcP7CFdFT0XeBuv6.ots" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\spnxfcp7cfdft0xebuv6.ots"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0112.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc4f8) returned 1 [0112.933] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\SPnXfcP7CFdFT0XeBuv6.ots" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\spnxfcp7cfdft0xebuv6.ots")) returned 0 [0112.933] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\SPnXfcP7CFdFT0XeBuv6.ots", nBufferLength=0x105, lpBuffer=0x2fd8d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\SPnXfcP7CFdFT0XeBuv6.ots", lpFilePart=0x0) returned 0x3b [0112.934] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\SPnXfcP7CFdFT0XeBuv6.ots", nBufferLength=0x105, lpBuffer=0x2fd1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\SPnXfcP7CFdFT0XeBuv6.ots", lpFilePart=0x0) returned 0x3b [0112.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd6d8) returned 1 [0112.934] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\SPnXfcP7CFdFT0XeBuv6.ots" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\spnxfcp7cfdft0xebuv6.ots"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0112.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc4f8) returned 1 [0112.935] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\SPnXfcP7CFdFT0XeBuv6.ots" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\spnxfcp7cfdft0xebuv6.ots")) returned 0 [0112.935] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\SPnXfcP7CFdFT0XeBuv6.ots", nBufferLength=0x105, lpBuffer=0x2fd8d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\SPnXfcP7CFdFT0XeBuv6.ots", lpFilePart=0x0) returned 0x3b [0112.935] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\SPnXfcP7CFdFT0XeBuv6.ots", nBufferLength=0x105, lpBuffer=0x2fd1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\SPnXfcP7CFdFT0XeBuv6.ots", lpFilePart=0x0) returned 0x3b [0112.935] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd6d8) returned 1 [0112.936] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\SPnXfcP7CFdFT0XeBuv6.ots" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\spnxfcp7cfdft0xebuv6.ots"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0112.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc4f8) returned 1 [0112.937] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\SPnXfcP7CFdFT0XeBuv6.ots" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\spnxfcp7cfdft0xebuv6.ots")) returned 0 [0112.937] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\SPnXfcP7CFdFT0XeBuv6.ots", nBufferLength=0x105, lpBuffer=0x2fd8d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\SPnXfcP7CFdFT0XeBuv6.ots", lpFilePart=0x0) returned 0x3b [0112.937] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\SPnXfcP7CFdFT0XeBuv6.ots", nBufferLength=0x105, lpBuffer=0x2fd1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\SPnXfcP7CFdFT0XeBuv6.ots", lpFilePart=0x0) returned 0x3b [0112.937] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd6d8) returned 1 [0112.938] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\SPnXfcP7CFdFT0XeBuv6.ots" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\spnxfcp7cfdft0xebuv6.ots"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0112.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc4f8) returned 1 [0112.939] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\SPnXfcP7CFdFT0XeBuv6.ots" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\spnxfcp7cfdft0xebuv6.ots")) returned 0 [0112.939] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\UapJbgd7.flv", nBufferLength=0x105, lpBuffer=0x2fd8d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\UapJbgd7.flv", lpFilePart=0x0) returned 0x2f [0112.939] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\UapJbgd7.flv", nBufferLength=0x105, lpBuffer=0x2fd1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\UapJbgd7.flv", lpFilePart=0x0) returned 0x2f [0112.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd6d8) returned 1 [0112.940] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\UapJbgd7.flv" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\uapjbgd7.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x360 [0112.940] GetFileType (hFile=0x360) returned 0x1 [0112.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fd6d4) returned 1 [0112.940] GetFileType (hFile=0x360) returned 0x1 [0112.940] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\UapJbgd7.flv.Poteston", nBufferLength=0x105, lpBuffer=0x2fd1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\UapJbgd7.flv.Poteston", lpFilePart=0x0) returned 0x38 [0112.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd6d8) returned 1 [0112.940] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\UapJbgd7.flv.Poteston" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\uapjbgd7.flv.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x364 [0112.942] GetFileType (hFile=0x364) returned 0x1 [0112.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fd6d4) returned 1 [0112.942] GetFileType (hFile=0x364) returned 0x1 [0112.942] SetEndOfFile (hFile=0x364) returned 1 [0112.943] ReadFile (in: hFile=0x360, lpBuffer=0x25bcb84, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x25bcb84*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0112.944] ReadFile (in: hFile=0x360, lpBuffer=0x25bcb84, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x25bcb84*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0112.945] WriteFile (in: hFile=0x364, lpBuffer=0x25bf088*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x2fd73c, lpOverlapped=0x0 | out: lpBuffer=0x25bf088*, lpNumberOfBytesWritten=0x2fd73c*=0x1000, lpOverlapped=0x0) returned 1 [0112.945] ReadFile (in: hFile=0x360, lpBuffer=0x25bcb84, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x25bcb84*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0112.945] ReadFile (in: hFile=0x360, lpBuffer=0x25bcb84, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x25bcb84*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0112.946] WriteFile (in: hFile=0x364, lpBuffer=0x25c110c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x2fd73c, lpOverlapped=0x0 | out: lpBuffer=0x25c110c*, lpNumberOfBytesWritten=0x2fd73c*=0x1000, lpOverlapped=0x0) returned 1 [0112.947] ReadFile (in: hFile=0x360, lpBuffer=0x25bcb84, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x25bcb84*, lpNumberOfBytesRead=0x2fd760*=0x5f4, lpOverlapped=0x0) returned 1 [0112.947] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\UapJbgd7.flv" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\uapjbgd7.flv")) returned 1 [0112.949] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\UapJbgd7.flv", nBufferLength=0x105, lpBuffer=0x2fd8d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\UapJbgd7.flv", lpFilePart=0x0) returned 0x2f [0112.949] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\UapJbgd7.flv", nBufferLength=0x105, lpBuffer=0x2fd1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\UapJbgd7.flv", lpFilePart=0x0) returned 0x2f [0112.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd6d8) returned 1 [0112.950] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\UapJbgd7.flv" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\uapjbgd7.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0112.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc4f8) returned 1 [0112.951] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\UapJbgd7.flv" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\uapjbgd7.flv")) returned 0 [0112.951] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\UapJbgd7.flv", nBufferLength=0x105, lpBuffer=0x2fd8d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\UapJbgd7.flv", lpFilePart=0x0) returned 0x2f [0112.951] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\UapJbgd7.flv", nBufferLength=0x105, lpBuffer=0x2fd1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\UapJbgd7.flv", lpFilePart=0x0) returned 0x2f [0112.951] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd6d8) returned 1 [0112.951] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\UapJbgd7.flv" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\uapjbgd7.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0112.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc4f8) returned 1 [0112.952] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\UapJbgd7.flv" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\uapjbgd7.flv")) returned 0 [0112.952] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\UapJbgd7.flv", nBufferLength=0x105, lpBuffer=0x2fd8d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\UapJbgd7.flv", lpFilePart=0x0) returned 0x2f [0112.953] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\UapJbgd7.flv", nBufferLength=0x105, lpBuffer=0x2fd1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\UapJbgd7.flv", lpFilePart=0x0) returned 0x2f [0112.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd6d8) returned 1 [0112.953] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\UapJbgd7.flv" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\uapjbgd7.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0112.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc4f8) returned 1 [0112.954] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\UapJbgd7.flv" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\uapjbgd7.flv")) returned 0 [0112.954] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\UapJbgd7.flv", nBufferLength=0x105, lpBuffer=0x2fd8d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\UapJbgd7.flv", lpFilePart=0x0) returned 0x2f [0112.954] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\UapJbgd7.flv", nBufferLength=0x105, lpBuffer=0x2fd1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\UapJbgd7.flv", lpFilePart=0x0) returned 0x2f [0112.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd6d8) returned 1 [0112.955] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\UapJbgd7.flv" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\uapjbgd7.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0112.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc4f8) returned 1 [0112.955] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\UapJbgd7.flv" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\uapjbgd7.flv")) returned 0 [0112.956] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\UapJbgd7.flv", nBufferLength=0x105, lpBuffer=0x2fd8d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\UapJbgd7.flv", lpFilePart=0x0) returned 0x2f [0112.956] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\UapJbgd7.flv", nBufferLength=0x105, lpBuffer=0x2fd1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\UapJbgd7.flv", lpFilePart=0x0) returned 0x2f [0112.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd6d8) returned 1 [0112.956] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\UapJbgd7.flv" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\uapjbgd7.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0112.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc4f8) returned 1 [0112.957] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\UapJbgd7.flv" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\uapjbgd7.flv")) returned 0 [0112.957] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\vc-4n.png", nBufferLength=0x105, lpBuffer=0x2fd8d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\vc-4n.png", lpFilePart=0x0) returned 0x2c [0112.957] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\vc-4n.png", nBufferLength=0x105, lpBuffer=0x2fd1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\vc-4n.png", lpFilePart=0x0) returned 0x2c [0112.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd6d8) returned 1 [0112.958] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\vc-4n.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\vc-4n.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x360 [0112.958] GetFileType (hFile=0x360) returned 0x1 [0112.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fd6d4) returned 1 [0112.958] GetFileType (hFile=0x360) returned 0x1 [0112.958] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\vc-4n.png.Poteston", nBufferLength=0x105, lpBuffer=0x2fd1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\vc-4n.png.Poteston", lpFilePart=0x0) returned 0x35 [0112.958] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd6d8) returned 1 [0112.958] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\vc-4n.png.Poteston" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\vc-4n.png.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x364 [0112.959] GetFileType (hFile=0x364) returned 0x1 [0112.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fd6d4) returned 1 [0112.959] GetFileType (hFile=0x364) returned 0x1 [0112.959] SetEndOfFile (hFile=0x364) returned 1 [0112.959] ReadFile (in: hFile=0x360, lpBuffer=0x25c8254, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x25c8254*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0112.960] WriteFile (in: hFile=0x364, lpBuffer=0x25c9710*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x2fd73c, lpOverlapped=0x0 | out: lpBuffer=0x25c9710*, lpNumberOfBytesWritten=0x2fd73c*=0x1000, lpOverlapped=0x0) returned 1 [0112.961] ReadFile (in: hFile=0x360, lpBuffer=0x25c8254, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x25c8254*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0112.962] ReadFile (in: hFile=0x360, lpBuffer=0x25c8254, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x25c8254*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0112.962] WriteFile (in: hFile=0x364, lpBuffer=0x25cb794*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x2fd73c, lpOverlapped=0x0 | out: lpBuffer=0x25cb794*, lpNumberOfBytesWritten=0x2fd73c*=0x1000, lpOverlapped=0x0) returned 1 [0112.962] ReadFile (in: hFile=0x360, lpBuffer=0x25c8254, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x25c8254*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0112.963] ReadFile (in: hFile=0x360, lpBuffer=0x25c8254, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x25c8254*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0112.963] WriteFile (in: hFile=0x364, lpBuffer=0x25cd818*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x2fd73c, lpOverlapped=0x0 | out: lpBuffer=0x25cd818*, lpNumberOfBytesWritten=0x2fd73c*=0x1000, lpOverlapped=0x0) returned 1 [0112.964] ReadFile (in: hFile=0x360, lpBuffer=0x25c8254, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x25c8254*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0112.964] ReadFile (in: hFile=0x360, lpBuffer=0x25c8254, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x25c8254*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0112.964] WriteFile (in: hFile=0x364, lpBuffer=0x25cf89c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x2fd73c, lpOverlapped=0x0 | out: lpBuffer=0x25cf89c*, lpNumberOfBytesWritten=0x2fd73c*=0x1000, lpOverlapped=0x0) returned 1 [0112.964] ReadFile (in: hFile=0x360, lpBuffer=0x25c8254, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x25c8254*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0112.965] ReadFile (in: hFile=0x360, lpBuffer=0x25c8254, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x25c8254*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0112.966] WriteFile (in: hFile=0x364, lpBuffer=0x25d1920*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x2fd73c, lpOverlapped=0x0 | out: lpBuffer=0x25d1920*, lpNumberOfBytesWritten=0x2fd73c*=0x1000, lpOverlapped=0x0) returned 1 [0112.966] ReadFile (in: hFile=0x360, lpBuffer=0x25c8254, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x25c8254*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0112.966] ReadFile (in: hFile=0x360, lpBuffer=0x25c8254, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x25c8254*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0112.967] WriteFile (in: hFile=0x364, lpBuffer=0x25d39a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x2fd73c, lpOverlapped=0x0 | out: lpBuffer=0x25d39a4*, lpNumberOfBytesWritten=0x2fd73c*=0x1000, lpOverlapped=0x0) returned 1 [0112.967] ReadFile (in: hFile=0x360, lpBuffer=0x25c8254, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x25c8254*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0112.967] ReadFile (in: hFile=0x360, lpBuffer=0x25c8254, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x25c8254*, lpNumberOfBytesRead=0x2fd760*=0xd74, lpOverlapped=0x0) returned 1 [0112.968] WriteFile (in: hFile=0x364, lpBuffer=0x25d67a4*, nNumberOfBytesToWrite=0xd80, lpNumberOfBytesWritten=0x2fd724, lpOverlapped=0x0 | out: lpBuffer=0x25d67a4*, lpNumberOfBytesWritten=0x2fd724*=0xd80, lpOverlapped=0x0) returned 1 [0112.968] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\vc-4n.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\vc-4n.png")) returned 1 [0112.970] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\vc-4n.png", nBufferLength=0x105, lpBuffer=0x2fd8d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\vc-4n.png", lpFilePart=0x0) returned 0x2c [0112.970] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\vc-4n.png", nBufferLength=0x105, lpBuffer=0x2fd1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\vc-4n.png", lpFilePart=0x0) returned 0x2c [0112.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd6d8) returned 1 [0112.971] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\vc-4n.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\vc-4n.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0112.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc4f8) returned 1 [0112.972] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\vc-4n.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\vc-4n.png")) returned 0 [0112.972] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\vc-4n.png", nBufferLength=0x105, lpBuffer=0x2fd8d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\vc-4n.png", lpFilePart=0x0) returned 0x2c [0112.972] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\vc-4n.png", nBufferLength=0x105, lpBuffer=0x2fd1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\vc-4n.png", lpFilePart=0x0) returned 0x2c [0112.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd6d8) returned 1 [0112.972] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\vc-4n.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\vc-4n.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0112.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc4f8) returned 1 [0112.973] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\vc-4n.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\vc-4n.png")) returned 0 [0112.974] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\vc-4n.png", nBufferLength=0x105, lpBuffer=0x2fd8d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\vc-4n.png", lpFilePart=0x0) returned 0x2c [0112.974] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\vc-4n.png", nBufferLength=0x105, lpBuffer=0x2fd1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\vc-4n.png", lpFilePart=0x0) returned 0x2c [0112.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd6d8) returned 1 [0112.974] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\vc-4n.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\vc-4n.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0112.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc4f8) returned 1 [0112.975] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\vc-4n.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\vc-4n.png")) returned 0 [0112.976] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\vc-4n.png", nBufferLength=0x105, lpBuffer=0x2fd8d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\vc-4n.png", lpFilePart=0x0) returned 0x2c [0112.976] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\vc-4n.png", nBufferLength=0x105, lpBuffer=0x2fd1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\vc-4n.png", lpFilePart=0x0) returned 0x2c [0112.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd6d8) returned 1 [0112.976] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\vc-4n.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\vc-4n.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0112.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc4f8) returned 1 [0112.977] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\vc-4n.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\vc-4n.png")) returned 0 [0112.978] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\vc-4n.png", nBufferLength=0x105, lpBuffer=0x2fd8d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\vc-4n.png", lpFilePart=0x0) returned 0x2c [0112.978] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\vc-4n.png", nBufferLength=0x105, lpBuffer=0x2fd1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\vc-4n.png", lpFilePart=0x0) returned 0x2c [0112.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd6d8) returned 1 [0112.978] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\vc-4n.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\vc-4n.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0112.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc4f8) returned 1 [0112.980] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\vc-4n.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\vc-4n.png")) returned 0 [0112.981] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fdb74, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt", lpFilePart=0x0) returned 0x2d [0112.981] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fe08c) returned 1 [0112.981] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x360 [0112.982] GetFileType (hFile=0x360) returned 0x1 [0112.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fe088) returned 1 [0112.982] GetFileType (hFile=0x360) returned 0x1 [0112.985] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fddcc) returned 1 [0112.985] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx", nBufferLength=0x105, lpBuffer=0x2fd8ac, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx", lpFilePart=0x0) returned 0x23 [0112.985] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\*", lpFindFileData=0x2fdb7c | out: lpFindFileData=0x2fdb7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x995dc4c0, ftCreationTime.dwHighDateTime=0x1d75438, ftLastAccessTime.dwLowDateTime=0xeaa071b0, ftLastAccessTime.dwHighDateTime=0x1d75b00, ftLastWriteTime.dwLowDateTime=0xeaa071b0, ftLastWriteTime.dwHighDateTime=0x1d75b00, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3caa80 [0112.985] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fdb84 | out: lpFindFileData=0x2fdb84*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x995dc4c0, ftCreationTime.dwHighDateTime=0x1d75438, ftLastAccessTime.dwLowDateTime=0xeaa071b0, ftLastAccessTime.dwHighDateTime=0x1d75b00, ftLastWriteTime.dwLowDateTime=0xeaa071b0, ftLastWriteTime.dwHighDateTime=0x1d75b00, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0112.986] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fdb84 | out: lpFindFileData=0x2fdb84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc39e60a0, ftCreationTime.dwHighDateTime=0x1d7528a, ftLastAccessTime.dwLowDateTime=0xdbe64d50, ftLastAccessTime.dwHighDateTime=0x1d75535, ftLastWriteTime.dwLowDateTime=0xdbe64d50, ftLastWriteTime.dwHighDateTime=0x1d75535, nFileSizeHigh=0x0, nFileSizeLow=0x29e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="7du2.gif", cAlternateFileName="")) returned 1 [0112.986] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fdb84 | out: lpFindFileData=0x2fdb84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6f62670, ftCreationTime.dwHighDateTime=0x1d7531a, ftLastAccessTime.dwLowDateTime=0x8f74d710, ftLastAccessTime.dwHighDateTime=0x1d7563a, ftLastWriteTime.dwLowDateTime=0x8f74d710, ftLastWriteTime.dwHighDateTime=0x1d7563a, nFileSizeHigh=0x0, nFileSizeLow=0xde88, dwReserved0=0x0, dwReserved1=0x0, cFileName="ixaXT-WqX0.swf", cAlternateFileName="IXAXT-~1.SWF")) returned 1 [0112.986] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fdb84 | out: lpFindFileData=0x2fdb84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5734cc40, ftCreationTime.dwHighDateTime=0x1d75386, ftLastAccessTime.dwLowDateTime=0x1e64f720, ftLastAccessTime.dwHighDateTime=0x1d75b9f, ftLastWriteTime.dwLowDateTime=0x1e64f720, ftLastWriteTime.dwHighDateTime=0x1d75b9f, nFileSizeHigh=0x0, nFileSizeLow=0x152b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="TETQ.m4a", cAlternateFileName="")) returned 1 [0112.986] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fdb84 | out: lpFindFileData=0x2fdb84*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x872e87c0, ftCreationTime.dwHighDateTime=0x1d75aab, ftLastAccessTime.dwLowDateTime=0x70c83570, ftLastAccessTime.dwHighDateTime=0x1d75af7, ftLastWriteTime.dwLowDateTime=0x70c83570, ftLastWriteTime.dwHighDateTime=0x1d75af7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UkCm4Dq_", cAlternateFileName="")) returned 1 [0112.986] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fdb84 | out: lpFindFileData=0x2fdb84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4781a630, ftCreationTime.dwHighDateTime=0x1d74c2c, ftLastAccessTime.dwLowDateTime=0x8432aff0, ftLastAccessTime.dwHighDateTime=0x1d75755, ftLastWriteTime.dwLowDateTime=0x8432aff0, ftLastWriteTime.dwHighDateTime=0x1d75755, nFileSizeHigh=0x0, nFileSizeLow=0x16965, dwReserved0=0x0, dwReserved1=0x0, cFileName="z71-eOvw.m4a", cAlternateFileName="")) returned 1 [0112.986] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fdb84 | out: lpFindFileData=0x2fdb84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4781a630, ftCreationTime.dwHighDateTime=0x1d74c2c, ftLastAccessTime.dwLowDateTime=0x8432aff0, ftLastAccessTime.dwHighDateTime=0x1d75755, ftLastWriteTime.dwLowDateTime=0x8432aff0, ftLastWriteTime.dwHighDateTime=0x1d75755, nFileSizeHigh=0x0, nFileSizeLow=0x16965, dwReserved0=0x0, dwReserved1=0x0, cFileName="z71-eOvw.m4a", cAlternateFileName="")) returned 0 [0112.986] FindClose (in: hFindFile=0x3caa80 | out: hFindFile=0x3caa80) returned 1 [0112.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fdb3c) returned 1 [0112.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fdd9c) returned 1 [0112.986] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fddcc) returned 1 [0112.986] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx", nBufferLength=0x105, lpBuffer=0x2fd8ac, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx", lpFilePart=0x0) returned 0x23 [0112.986] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\*", lpFindFileData=0x2fdb7c | out: lpFindFileData=0x2fdb7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x995dc4c0, ftCreationTime.dwHighDateTime=0x1d75438, ftLastAccessTime.dwLowDateTime=0xeaa071b0, ftLastAccessTime.dwHighDateTime=0x1d75b00, ftLastWriteTime.dwLowDateTime=0xeaa071b0, ftLastWriteTime.dwHighDateTime=0x1d75b00, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3caa80 [0112.986] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fdb84 | out: lpFindFileData=0x2fdb84*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x995dc4c0, ftCreationTime.dwHighDateTime=0x1d75438, ftLastAccessTime.dwLowDateTime=0xeaa071b0, ftLastAccessTime.dwHighDateTime=0x1d75b00, ftLastWriteTime.dwLowDateTime=0xeaa071b0, ftLastWriteTime.dwHighDateTime=0x1d75b00, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0112.986] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fdb84 | out: lpFindFileData=0x2fdb84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc39e60a0, ftCreationTime.dwHighDateTime=0x1d7528a, ftLastAccessTime.dwLowDateTime=0xdbe64d50, ftLastAccessTime.dwHighDateTime=0x1d75535, ftLastWriteTime.dwLowDateTime=0xdbe64d50, ftLastWriteTime.dwHighDateTime=0x1d75535, nFileSizeHigh=0x0, nFileSizeLow=0x29e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="7du2.gif", cAlternateFileName="")) returned 1 [0112.986] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fdb84 | out: lpFindFileData=0x2fdb84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6f62670, ftCreationTime.dwHighDateTime=0x1d7531a, ftLastAccessTime.dwLowDateTime=0x8f74d710, ftLastAccessTime.dwHighDateTime=0x1d7563a, ftLastWriteTime.dwLowDateTime=0x8f74d710, ftLastWriteTime.dwHighDateTime=0x1d7563a, nFileSizeHigh=0x0, nFileSizeLow=0xde88, dwReserved0=0x0, dwReserved1=0x0, cFileName="ixaXT-WqX0.swf", cAlternateFileName="IXAXT-~1.SWF")) returned 1 [0112.986] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fdb84 | out: lpFindFileData=0x2fdb84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5734cc40, ftCreationTime.dwHighDateTime=0x1d75386, ftLastAccessTime.dwLowDateTime=0x1e64f720, ftLastAccessTime.dwHighDateTime=0x1d75b9f, ftLastWriteTime.dwLowDateTime=0x1e64f720, ftLastWriteTime.dwHighDateTime=0x1d75b9f, nFileSizeHigh=0x0, nFileSizeLow=0x152b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="TETQ.m4a", cAlternateFileName="")) returned 1 [0112.987] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fdb84 | out: lpFindFileData=0x2fdb84*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x872e87c0, ftCreationTime.dwHighDateTime=0x1d75aab, ftLastAccessTime.dwLowDateTime=0x70c83570, ftLastAccessTime.dwHighDateTime=0x1d75af7, ftLastWriteTime.dwLowDateTime=0x70c83570, ftLastWriteTime.dwHighDateTime=0x1d75af7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UkCm4Dq_", cAlternateFileName="")) returned 1 [0112.987] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fdb84 | out: lpFindFileData=0x2fdb84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4781a630, ftCreationTime.dwHighDateTime=0x1d74c2c, ftLastAccessTime.dwLowDateTime=0x8432aff0, ftLastAccessTime.dwHighDateTime=0x1d75755, ftLastWriteTime.dwLowDateTime=0x8432aff0, ftLastWriteTime.dwHighDateTime=0x1d75755, nFileSizeHigh=0x0, nFileSizeLow=0x16965, dwReserved0=0x0, dwReserved1=0x0, cFileName="z71-eOvw.m4a", cAlternateFileName="")) returned 1 [0112.987] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fdb84 | out: lpFindFileData=0x2fdb84*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0112.987] FindClose (in: hFindFile=0x3caa80 | out: hFindFile=0x3caa80) returned 1 [0112.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fdb3c) returned 1 [0112.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fdd9c) returned 1 [0112.987] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\7du2.gif", nBufferLength=0x105, lpBuffer=0x2fd8d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\7du2.gif", lpFilePart=0x0) returned 0x2c [0112.988] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\7du2.gif", nBufferLength=0x105, lpBuffer=0x2fd1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\7du2.gif", lpFilePart=0x0) returned 0x2c [0112.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd6d8) returned 1 [0112.988] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\7du2.gif" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\7du2.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x360 [0112.988] GetFileType (hFile=0x360) returned 0x1 [0112.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fd6d4) returned 1 [0112.988] GetFileType (hFile=0x360) returned 0x1 [0112.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd6d8) returned 1 [0112.989] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\7du2.gif.Poteston" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\7du2.gif.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x364 [0112.989] GetFileType (hFile=0x364) returned 0x1 [0112.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fd6d4) returned 1 [0112.990] GetFileType (hFile=0x364) returned 0x1 [0112.990] SetEndOfFile (hFile=0x364) returned 1 [0112.990] ReadFile (in: hFile=0x360, lpBuffer=0x25e2628, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x25e2628*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0112.992] ReadFile (in: hFile=0x360, lpBuffer=0x25e2628, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x25e2628*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0112.992] ReadFile (in: hFile=0x360, lpBuffer=0x25e2628, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x25e2628*, lpNumberOfBytesRead=0x2fd760*=0x9e1, lpOverlapped=0x0) returned 1 [0112.992] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\7du2.gif" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\7du2.gif")) returned 1 [0112.994] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd6d8) returned 1 [0112.994] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\7du2.gif" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\7du2.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0112.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc4f8) returned 1 [0112.996] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\7du2.gif" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\7du2.gif")) returned 0 [0112.996] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd6d8) returned 1 [0112.996] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\7du2.gif" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\7du2.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0112.997] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc4f8) returned 1 [0112.997] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\7du2.gif" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\7du2.gif")) returned 0 [0112.997] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd6d8) returned 1 [0112.997] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\7du2.gif" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\7du2.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0112.998] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc4f8) returned 1 [0112.998] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\7du2.gif" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\7du2.gif")) returned 0 [0112.999] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd890) returned 1 [0113.000] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x872e87c0, ftCreationTime.dwHighDateTime=0x1d75aab, ftLastAccessTime.dwLowDateTime=0x70c83570, ftLastAccessTime.dwHighDateTime=0x1d75af7, ftLastWriteTime.dwLowDateTime=0x70c83570, ftLastWriteTime.dwHighDateTime=0x1d75af7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.000] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e3c0c70, ftCreationTime.dwHighDateTime=0x1d75502, ftLastAccessTime.dwLowDateTime=0xd3028730, ftLastAccessTime.dwHighDateTime=0x1d75af3, ftLastWriteTime.dwLowDateTime=0xd3028730, ftLastWriteTime.dwHighDateTime=0x1d75af3, nFileSizeHigh=0x0, nFileSizeLow=0x8591, dwReserved0=0x0, dwReserved1=0x0, cFileName="2W4Hx.m4a", cAlternateFileName="")) returned 1 [0113.000] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77413cd0, ftCreationTime.dwHighDateTime=0x1d7569c, ftLastAccessTime.dwLowDateTime=0x5c6a2620, ftLastAccessTime.dwHighDateTime=0x1d75899, ftLastWriteTime.dwLowDateTime=0x5c6a2620, ftLastWriteTime.dwHighDateTime=0x1d75899, nFileSizeHigh=0x0, nFileSizeLow=0x14b18, dwReserved0=0x0, dwReserved1=0x0, cFileName="EoS9VOqOPP_4IHn.mp4", cAlternateFileName="EOS9VO~1.MP4")) returned 1 [0113.000] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x894464c0, ftCreationTime.dwHighDateTime=0x1d75750, ftLastAccessTime.dwLowDateTime=0xa692a300, ftLastAccessTime.dwHighDateTime=0x1d75b53, ftLastWriteTime.dwLowDateTime=0xa692a300, ftLastWriteTime.dwHighDateTime=0x1d75b53, nFileSizeHigh=0x0, nFileSizeLow=0x14625, dwReserved0=0x0, dwReserved1=0x0, cFileName="G ZkrQjDnE0.odt", cAlternateFileName="GZKRQJ~1.ODT")) returned 1 [0113.000] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed1c2ec0, ftCreationTime.dwHighDateTime=0x1d756dc, ftLastAccessTime.dwLowDateTime=0x67ceef40, ftLastAccessTime.dwHighDateTime=0x1d75764, ftLastWriteTime.dwLowDateTime=0x67ceef40, ftLastWriteTime.dwHighDateTime=0x1d75764, nFileSizeHigh=0x0, nFileSizeLow=0x9872, dwReserved0=0x0, dwReserved1=0x0, cFileName="noCEUmxfykebkeyH9.flv", cAlternateFileName="NOCEUM~1.FLV")) returned 1 [0113.000] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2cb9fe0, ftCreationTime.dwHighDateTime=0x1d758a8, ftLastAccessTime.dwLowDateTime=0x6f374bb0, ftLastAccessTime.dwHighDateTime=0x1d75b38, ftLastWriteTime.dwLowDateTime=0x6f374bb0, ftLastWriteTime.dwHighDateTime=0x1d75b38, nFileSizeHigh=0x0, nFileSizeLow=0xb139, dwReserved0=0x0, dwReserved1=0x0, cFileName="TbVG3PC0bCG2.png", cAlternateFileName="TBVG3P~1.PNG")) returned 1 [0113.000] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8ab9ac0, ftCreationTime.dwHighDateTime=0x1d75ba9, ftLastAccessTime.dwLowDateTime=0xcac457a0, ftLastAccessTime.dwHighDateTime=0x1d75c16, ftLastWriteTime.dwLowDateTime=0xcac457a0, ftLastWriteTime.dwHighDateTime=0x1d75c16, nFileSizeHigh=0x0, nFileSizeLow=0xd19a, dwReserved0=0x0, dwReserved1=0x0, cFileName="XbvlKnZREA1k.mp3", cAlternateFileName="XBVLKN~1.MP3")) returned 1 [0113.000] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca36ae0, ftCreationTime.dwHighDateTime=0x1d75ad1, ftLastAccessTime.dwLowDateTime=0xf7a79700, ftLastAccessTime.dwHighDateTime=0x1d75c7a, ftLastWriteTime.dwLowDateTime=0xf7a79700, ftLastWriteTime.dwHighDateTime=0x1d75c7a, nFileSizeHigh=0x0, nFileSizeLow=0x8140, dwReserved0=0x0, dwReserved1=0x0, cFileName="XtD X6g3ZZH.m4a", cAlternateFileName="XTDX6G~1.M4A")) returned 1 [0113.000] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca36ae0, ftCreationTime.dwHighDateTime=0x1d75ad1, ftLastAccessTime.dwLowDateTime=0xf7a79700, ftLastAccessTime.dwHighDateTime=0x1d75c7a, ftLastWriteTime.dwLowDateTime=0xf7a79700, ftLastWriteTime.dwHighDateTime=0x1d75c7a, nFileSizeHigh=0x0, nFileSizeLow=0x8140, dwReserved0=0x0, dwReserved1=0x0, cFileName="XtD X6g3ZZH.m4a", cAlternateFileName="XTDX6G~1.M4A")) returned 0 [0113.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fd600) returned 1 [0113.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fd860) returned 1 [0113.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd890) returned 1 [0113.000] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x872e87c0, ftCreationTime.dwHighDateTime=0x1d75aab, ftLastAccessTime.dwLowDateTime=0x70c83570, ftLastAccessTime.dwHighDateTime=0x1d75af7, ftLastWriteTime.dwLowDateTime=0x70c83570, ftLastWriteTime.dwHighDateTime=0x1d75af7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.000] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e3c0c70, ftCreationTime.dwHighDateTime=0x1d75502, ftLastAccessTime.dwLowDateTime=0xd3028730, ftLastAccessTime.dwHighDateTime=0x1d75af3, ftLastWriteTime.dwLowDateTime=0xd3028730, ftLastWriteTime.dwHighDateTime=0x1d75af3, nFileSizeHigh=0x0, nFileSizeLow=0x8591, dwReserved0=0x0, dwReserved1=0x0, cFileName="2W4Hx.m4a", cAlternateFileName="")) returned 1 [0113.000] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77413cd0, ftCreationTime.dwHighDateTime=0x1d7569c, ftLastAccessTime.dwLowDateTime=0x5c6a2620, ftLastAccessTime.dwHighDateTime=0x1d75899, ftLastWriteTime.dwLowDateTime=0x5c6a2620, ftLastWriteTime.dwHighDateTime=0x1d75899, nFileSizeHigh=0x0, nFileSizeLow=0x14b18, dwReserved0=0x0, dwReserved1=0x0, cFileName="EoS9VOqOPP_4IHn.mp4", cAlternateFileName="EOS9VO~1.MP4")) returned 1 [0113.000] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x894464c0, ftCreationTime.dwHighDateTime=0x1d75750, ftLastAccessTime.dwLowDateTime=0xa692a300, ftLastAccessTime.dwHighDateTime=0x1d75b53, ftLastWriteTime.dwLowDateTime=0xa692a300, ftLastWriteTime.dwHighDateTime=0x1d75b53, nFileSizeHigh=0x0, nFileSizeLow=0x14625, dwReserved0=0x0, dwReserved1=0x0, cFileName="G ZkrQjDnE0.odt", cAlternateFileName="GZKRQJ~1.ODT")) returned 1 [0113.000] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed1c2ec0, ftCreationTime.dwHighDateTime=0x1d756dc, ftLastAccessTime.dwLowDateTime=0x67ceef40, ftLastAccessTime.dwHighDateTime=0x1d75764, ftLastWriteTime.dwLowDateTime=0x67ceef40, ftLastWriteTime.dwHighDateTime=0x1d75764, nFileSizeHigh=0x0, nFileSizeLow=0x9872, dwReserved0=0x0, dwReserved1=0x0, cFileName="noCEUmxfykebkeyH9.flv", cAlternateFileName="NOCEUM~1.FLV")) returned 1 [0113.000] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2cb9fe0, ftCreationTime.dwHighDateTime=0x1d758a8, ftLastAccessTime.dwLowDateTime=0x6f374bb0, ftLastAccessTime.dwHighDateTime=0x1d75b38, ftLastWriteTime.dwLowDateTime=0x6f374bb0, ftLastWriteTime.dwHighDateTime=0x1d75b38, nFileSizeHigh=0x0, nFileSizeLow=0xb139, dwReserved0=0x0, dwReserved1=0x0, cFileName="TbVG3PC0bCG2.png", cAlternateFileName="TBVG3P~1.PNG")) returned 1 [0113.000] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8ab9ac0, ftCreationTime.dwHighDateTime=0x1d75ba9, ftLastAccessTime.dwLowDateTime=0xcac457a0, ftLastAccessTime.dwHighDateTime=0x1d75c16, ftLastWriteTime.dwLowDateTime=0xcac457a0, ftLastWriteTime.dwHighDateTime=0x1d75c16, nFileSizeHigh=0x0, nFileSizeLow=0xd19a, dwReserved0=0x0, dwReserved1=0x0, cFileName="XbvlKnZREA1k.mp3", cAlternateFileName="XBVLKN~1.MP3")) returned 1 [0113.001] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca36ae0, ftCreationTime.dwHighDateTime=0x1d75ad1, ftLastAccessTime.dwLowDateTime=0xf7a79700, ftLastAccessTime.dwHighDateTime=0x1d75c7a, ftLastWriteTime.dwLowDateTime=0xf7a79700, ftLastWriteTime.dwHighDateTime=0x1d75c7a, nFileSizeHigh=0x0, nFileSizeLow=0x8140, dwReserved0=0x0, dwReserved1=0x0, cFileName="XtD X6g3ZZH.m4a", cAlternateFileName="XTDX6G~1.M4A")) returned 1 [0113.001] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0113.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fd600) returned 1 [0113.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fd860) returned 1 [0113.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd19c) returned 1 [0113.001] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\2W4Hx.m4a" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\2w4hx.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x360 [0113.001] GetFileType (hFile=0x360) returned 0x1 [0113.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fd198) returned 1 [0113.001] GetFileType (hFile=0x360) returned 0x1 [0113.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd19c) returned 1 [0113.001] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\2W4Hx.m4a.Poteston" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\2w4hx.m4a.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x364 [0113.002] GetFileType (hFile=0x364) returned 0x1 [0113.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fd198) returned 1 [0113.002] GetFileType (hFile=0x364) returned 0x1 [0113.002] SetEndOfFile (hFile=0x364) returned 1 [0113.002] ReadFile (in: hFile=0x360, lpBuffer=0x25ec898, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x25ec898*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.004] ReadFile (in: hFile=0x360, lpBuffer=0x25ec898, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x25ec898*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.004] ReadFile (in: hFile=0x360, lpBuffer=0x25ec898, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x25ec898*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.004] ReadFile (in: hFile=0x360, lpBuffer=0x25ec898, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x25ec898*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.005] ReadFile (in: hFile=0x360, lpBuffer=0x25ec898, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x25ec898*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.005] ReadFile (in: hFile=0x360, lpBuffer=0x25ec898, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x25ec898*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.006] ReadFile (in: hFile=0x360, lpBuffer=0x25ec898, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x25ec898*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.006] ReadFile (in: hFile=0x360, lpBuffer=0x25ec898, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x25ec898*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.006] ReadFile (in: hFile=0x360, lpBuffer=0x25ec898, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x25ec898*, lpNumberOfBytesRead=0x2fd224*=0x591, lpOverlapped=0x0) returned 1 [0113.007] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\2W4Hx.m4a" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\2w4hx.m4a")) returned 1 [0113.008] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd19c) returned 1 [0113.008] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\2W4Hx.m4a" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\2w4hx.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fbfb8) returned 1 [0113.009] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\2W4Hx.m4a" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\2w4hx.m4a")) returned 0 [0113.009] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd19c) returned 1 [0113.009] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\2W4Hx.m4a" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\2w4hx.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fbfb8) returned 1 [0113.010] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\2W4Hx.m4a" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\2w4hx.m4a")) returned 0 [0113.011] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd19c) returned 1 [0113.011] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\2W4Hx.m4a" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\2w4hx.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fbfb8) returned 1 [0113.012] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\2W4Hx.m4a" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\2w4hx.m4a")) returned 0 [0113.012] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd19c) returned 1 [0113.012] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\2W4Hx.m4a" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\2w4hx.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fbfb8) returned 1 [0113.013] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\2W4Hx.m4a" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\2w4hx.m4a")) returned 0 [0113.013] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd19c) returned 1 [0113.013] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\2W4Hx.m4a" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\2w4hx.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fbfb8) returned 1 [0113.014] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\2W4Hx.m4a" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\2w4hx.m4a")) returned 0 [0113.014] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd19c) returned 1 [0113.014] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\2W4Hx.m4a" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\2w4hx.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.015] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fbfb8) returned 1 [0113.015] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\2W4Hx.m4a" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\2w4hx.m4a")) returned 0 [0113.015] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd19c) returned 1 [0113.015] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\EoS9VOqOPP_4IHn.mp4" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\eos9voqopp_4ihn.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x360 [0113.015] GetFileType (hFile=0x360) returned 0x1 [0113.015] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fd198) returned 1 [0113.015] GetFileType (hFile=0x360) returned 0x1 [0113.015] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd19c) returned 1 [0113.015] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\EoS9VOqOPP_4IHn.mp4.Poteston" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\eos9voqopp_4ihn.mp4.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x364 [0113.016] GetFileType (hFile=0x364) returned 0x1 [0113.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fd198) returned 1 [0113.016] GetFileType (hFile=0x364) returned 0x1 [0113.016] SetEndOfFile (hFile=0x364) returned 1 [0113.016] ReadFile (in: hFile=0x360, lpBuffer=0x25fce70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x25fce70*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.018] ReadFile (in: hFile=0x360, lpBuffer=0x25fce70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x25fce70*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.018] ReadFile (in: hFile=0x360, lpBuffer=0x25fce70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x25fce70*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.019] ReadFile (in: hFile=0x360, lpBuffer=0x25fce70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x25fce70*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.019] ReadFile (in: hFile=0x360, lpBuffer=0x25fce70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x25fce70*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.019] ReadFile (in: hFile=0x360, lpBuffer=0x25fce70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x25fce70*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.020] ReadFile (in: hFile=0x360, lpBuffer=0x25fce70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x25fce70*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.020] ReadFile (in: hFile=0x360, lpBuffer=0x25fce70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x25fce70*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.020] ReadFile (in: hFile=0x360, lpBuffer=0x25fce70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x25fce70*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.021] ReadFile (in: hFile=0x360, lpBuffer=0x25fce70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x25fce70*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.021] ReadFile (in: hFile=0x360, lpBuffer=0x25fce70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x25fce70*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.021] ReadFile (in: hFile=0x360, lpBuffer=0x25fce70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x25fce70*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.022] ReadFile (in: hFile=0x360, lpBuffer=0x25fce70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x25fce70*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.022] ReadFile (in: hFile=0x360, lpBuffer=0x25fce70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x25fce70*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.022] ReadFile (in: hFile=0x360, lpBuffer=0x25fce70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x25fce70*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.022] ReadFile (in: hFile=0x360, lpBuffer=0x25fce70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x25fce70*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.023] ReadFile (in: hFile=0x360, lpBuffer=0x25fce70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x25fce70*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.023] ReadFile (in: hFile=0x360, lpBuffer=0x25fce70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x25fce70*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.023] ReadFile (in: hFile=0x360, lpBuffer=0x25fce70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x25fce70*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.024] ReadFile (in: hFile=0x360, lpBuffer=0x25fce70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x25fce70*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.024] ReadFile (in: hFile=0x360, lpBuffer=0x25fce70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x25fce70*, lpNumberOfBytesRead=0x2fd224*=0xb18, lpOverlapped=0x0) returned 1 [0113.025] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\EoS9VOqOPP_4IHn.mp4" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\eos9voqopp_4ihn.mp4")) returned 1 [0113.027] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd19c) returned 1 [0113.027] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\EoS9VOqOPP_4IHn.mp4" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\eos9voqopp_4ihn.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fbfb8) returned 1 [0113.028] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\EoS9VOqOPP_4IHn.mp4" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\eos9voqopp_4ihn.mp4")) returned 0 [0113.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd19c) returned 1 [0113.028] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\EoS9VOqOPP_4IHn.mp4" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\eos9voqopp_4ihn.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fbfb8) returned 1 [0113.029] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\EoS9VOqOPP_4IHn.mp4" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\eos9voqopp_4ihn.mp4")) returned 0 [0113.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd19c) returned 1 [0113.029] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\EoS9VOqOPP_4IHn.mp4" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\eos9voqopp_4ihn.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fbfb8) returned 1 [0113.030] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\EoS9VOqOPP_4IHn.mp4" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\eos9voqopp_4ihn.mp4")) returned 0 [0113.030] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd19c) returned 1 [0113.030] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\EoS9VOqOPP_4IHn.mp4" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\eos9voqopp_4ihn.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fbfb8) returned 1 [0113.031] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\EoS9VOqOPP_4IHn.mp4" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\eos9voqopp_4ihn.mp4")) returned 0 [0113.031] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd19c) returned 1 [0113.032] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\EoS9VOqOPP_4IHn.mp4" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\eos9voqopp_4ihn.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fbfb8) returned 1 [0113.032] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\EoS9VOqOPP_4IHn.mp4" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\eos9voqopp_4ihn.mp4")) returned 0 [0113.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd19c) returned 1 [0113.033] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\EoS9VOqOPP_4IHn.mp4" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\eos9voqopp_4ihn.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fbfb8) returned 1 [0113.033] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\EoS9VOqOPP_4IHn.mp4" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\eos9voqopp_4ihn.mp4")) returned 0 [0113.034] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd19c) returned 1 [0113.034] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\G ZkrQjDnE0.odt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\g zkrqjdne0.odt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x360 [0113.034] GetFileType (hFile=0x360) returned 0x1 [0113.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fd198) returned 1 [0113.034] GetFileType (hFile=0x360) returned 0x1 [0113.034] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd19c) returned 1 [0113.034] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\G ZkrQjDnE0.odt.Poteston" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\g zkrqjdne0.odt.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x364 [0113.034] GetFileType (hFile=0x364) returned 0x1 [0113.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fd198) returned 1 [0113.034] GetFileType (hFile=0x364) returned 0x1 [0113.035] SetEndOfFile (hFile=0x364) returned 1 [0113.035] ReadFile (in: hFile=0x360, lpBuffer=0x2619f7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x2619f7c*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.037] ReadFile (in: hFile=0x360, lpBuffer=0x2619f7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x2619f7c*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.037] ReadFile (in: hFile=0x360, lpBuffer=0x2619f7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x2619f7c*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.037] ReadFile (in: hFile=0x360, lpBuffer=0x2619f7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x2619f7c*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.038] ReadFile (in: hFile=0x360, lpBuffer=0x2619f7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x2619f7c*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.038] ReadFile (in: hFile=0x360, lpBuffer=0x2619f7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x2619f7c*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.038] ReadFile (in: hFile=0x360, lpBuffer=0x2619f7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x2619f7c*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.039] ReadFile (in: hFile=0x360, lpBuffer=0x2619f7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x2619f7c*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.039] ReadFile (in: hFile=0x360, lpBuffer=0x2619f7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x2619f7c*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.039] ReadFile (in: hFile=0x360, lpBuffer=0x2619f7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x2619f7c*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.040] ReadFile (in: hFile=0x360, lpBuffer=0x2619f7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x2619f7c*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.040] ReadFile (in: hFile=0x360, lpBuffer=0x2619f7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x2619f7c*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.040] ReadFile (in: hFile=0x360, lpBuffer=0x2619f7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x2619f7c*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.041] ReadFile (in: hFile=0x360, lpBuffer=0x2619f7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x2619f7c*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.041] ReadFile (in: hFile=0x360, lpBuffer=0x2619f7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x2619f7c*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.042] ReadFile (in: hFile=0x360, lpBuffer=0x2619f7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x2619f7c*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.043] ReadFile (in: hFile=0x360, lpBuffer=0x2619f7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x2619f7c*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.043] ReadFile (in: hFile=0x360, lpBuffer=0x2619f7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x2619f7c*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.043] ReadFile (in: hFile=0x360, lpBuffer=0x2619f7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x2619f7c*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.044] ReadFile (in: hFile=0x360, lpBuffer=0x2619f7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x2619f7c*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.044] ReadFile (in: hFile=0x360, lpBuffer=0x2619f7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x2619f7c*, lpNumberOfBytesRead=0x2fd224*=0x625, lpOverlapped=0x0) returned 1 [0113.044] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\G ZkrQjDnE0.odt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\g zkrqjdne0.odt")) returned 1 [0113.047] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd19c) returned 1 [0113.047] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\G ZkrQjDnE0.odt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\g zkrqjdne0.odt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fbfb8) returned 1 [0113.048] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\G ZkrQjDnE0.odt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\g zkrqjdne0.odt")) returned 0 [0113.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd19c) returned 1 [0113.048] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\G ZkrQjDnE0.odt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\g zkrqjdne0.odt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fbfb8) returned 1 [0113.049] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\G ZkrQjDnE0.odt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\g zkrqjdne0.odt")) returned 0 [0113.049] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd19c) returned 1 [0113.050] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\G ZkrQjDnE0.odt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\g zkrqjdne0.odt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fbfb8) returned 1 [0113.050] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\G ZkrQjDnE0.odt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\g zkrqjdne0.odt")) returned 0 [0113.051] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd19c) returned 1 [0113.051] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\G ZkrQjDnE0.odt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\g zkrqjdne0.odt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fbfb8) returned 1 [0113.052] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\G ZkrQjDnE0.odt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\g zkrqjdne0.odt")) returned 0 [0113.052] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd19c) returned 1 [0113.052] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\G ZkrQjDnE0.odt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\g zkrqjdne0.odt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.053] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fbfb8) returned 1 [0113.053] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\G ZkrQjDnE0.odt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\g zkrqjdne0.odt")) returned 0 [0113.053] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd19c) returned 1 [0113.053] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\G ZkrQjDnE0.odt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\g zkrqjdne0.odt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fbfb8) returned 1 [0113.054] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\G ZkrQjDnE0.odt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\g zkrqjdne0.odt")) returned 0 [0113.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd19c) returned 1 [0113.054] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\noCEUmxfykebkeyH9.flv" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\noceumxfykebkeyh9.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x360 [0113.054] GetFileType (hFile=0x360) returned 0x1 [0113.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fd198) returned 1 [0113.055] GetFileType (hFile=0x360) returned 0x1 [0113.055] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd19c) returned 1 [0113.055] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\noCEUmxfykebkeyH9.flv.Poteston" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\noceumxfykebkeyh9.flv.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x364 [0113.055] GetFileType (hFile=0x364) returned 0x1 [0113.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fd198) returned 1 [0113.055] GetFileType (hFile=0x364) returned 0x1 [0113.055] SetEndOfFile (hFile=0x364) returned 1 [0113.056] ReadFile (in: hFile=0x360, lpBuffer=0x2636ac4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x2636ac4*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.058] ReadFile (in: hFile=0x360, lpBuffer=0x2636ac4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x2636ac4*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.058] ReadFile (in: hFile=0x360, lpBuffer=0x2636ac4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x2636ac4*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.058] ReadFile (in: hFile=0x360, lpBuffer=0x2636ac4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x2636ac4*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.059] ReadFile (in: hFile=0x360, lpBuffer=0x2636ac4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x2636ac4*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.059] ReadFile (in: hFile=0x360, lpBuffer=0x2636ac4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x2636ac4*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.059] ReadFile (in: hFile=0x360, lpBuffer=0x2636ac4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x2636ac4*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.060] ReadFile (in: hFile=0x360, lpBuffer=0x2636ac4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x2636ac4*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.060] ReadFile (in: hFile=0x360, lpBuffer=0x2636ac4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x2636ac4*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.060] ReadFile (in: hFile=0x360, lpBuffer=0x2636ac4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x2636ac4*, lpNumberOfBytesRead=0x2fd224*=0x872, lpOverlapped=0x0) returned 1 [0113.061] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\noCEUmxfykebkeyH9.flv" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\noceumxfykebkeyh9.flv")) returned 1 [0113.063] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd19c) returned 1 [0113.063] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\noCEUmxfykebkeyH9.flv" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\noceumxfykebkeyh9.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fbfb8) returned 1 [0113.064] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\noCEUmxfykebkeyH9.flv" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\noceumxfykebkeyh9.flv")) returned 0 [0113.064] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd19c) returned 1 [0113.064] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\noCEUmxfykebkeyH9.flv" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\noceumxfykebkeyh9.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fbfb8) returned 1 [0113.065] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\noCEUmxfykebkeyH9.flv" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\noceumxfykebkeyh9.flv")) returned 0 [0113.065] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd19c) returned 1 [0113.065] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\noCEUmxfykebkeyH9.flv" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\noceumxfykebkeyh9.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fbfb8) returned 1 [0113.066] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\noCEUmxfykebkeyH9.flv" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\noceumxfykebkeyh9.flv")) returned 0 [0113.066] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd19c) returned 1 [0113.066] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\noCEUmxfykebkeyH9.flv" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\noceumxfykebkeyh9.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fbfb8) returned 1 [0113.067] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\noCEUmxfykebkeyH9.flv" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\noceumxfykebkeyh9.flv")) returned 0 [0113.067] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd19c) returned 1 [0113.067] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\noCEUmxfykebkeyH9.flv" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\noceumxfykebkeyh9.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fbfb8) returned 1 [0113.067] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\noCEUmxfykebkeyH9.flv" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\noceumxfykebkeyh9.flv")) returned 0 [0113.068] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd19c) returned 1 [0113.068] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\noCEUmxfykebkeyH9.flv" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\noceumxfykebkeyh9.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.068] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fbfb8) returned 1 [0113.068] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\noCEUmxfykebkeyH9.flv" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\noceumxfykebkeyh9.flv")) returned 0 [0113.068] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd19c) returned 1 [0113.068] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\TbVG3PC0bCG2.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\tbvg3pc0bcg2.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x360 [0113.069] GetFileType (hFile=0x360) returned 0x1 [0113.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fd198) returned 1 [0113.069] GetFileType (hFile=0x360) returned 0x1 [0113.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd19c) returned 1 [0113.069] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\TbVG3PC0bCG2.png.Poteston" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\tbvg3pc0bcg2.png.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x364 [0113.069] GetFileType (hFile=0x364) returned 0x1 [0113.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fd198) returned 1 [0113.069] GetFileType (hFile=0x364) returned 0x1 [0113.069] SetEndOfFile (hFile=0x364) returned 1 [0113.069] ReadFile (in: hFile=0x360, lpBuffer=0x26486fc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x26486fc*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.071] ReadFile (in: hFile=0x360, lpBuffer=0x26486fc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x26486fc*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.072] ReadFile (in: hFile=0x360, lpBuffer=0x26486fc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x26486fc*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.072] ReadFile (in: hFile=0x360, lpBuffer=0x26486fc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x26486fc*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.072] ReadFile (in: hFile=0x360, lpBuffer=0x26486fc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x26486fc*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.073] ReadFile (in: hFile=0x360, lpBuffer=0x26486fc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x26486fc*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.073] ReadFile (in: hFile=0x360, lpBuffer=0x26486fc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x26486fc*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.073] ReadFile (in: hFile=0x360, lpBuffer=0x26486fc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x26486fc*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.074] ReadFile (in: hFile=0x360, lpBuffer=0x26486fc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x26486fc*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.074] ReadFile (in: hFile=0x360, lpBuffer=0x26486fc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x26486fc*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.074] ReadFile (in: hFile=0x360, lpBuffer=0x26486fc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x26486fc*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.075] ReadFile (in: hFile=0x360, lpBuffer=0x26486fc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x26486fc*, lpNumberOfBytesRead=0x2fd224*=0x139, lpOverlapped=0x0) returned 1 [0113.075] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\TbVG3PC0bCG2.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\tbvg3pc0bcg2.png")) returned 1 [0113.077] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd19c) returned 1 [0113.077] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\TbVG3PC0bCG2.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\tbvg3pc0bcg2.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fbfb8) returned 1 [0113.078] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\TbVG3PC0bCG2.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\tbvg3pc0bcg2.png")) returned 0 [0113.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd19c) returned 1 [0113.078] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\TbVG3PC0bCG2.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\tbvg3pc0bcg2.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fbfb8) returned 1 [0113.078] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\TbVG3PC0bCG2.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\tbvg3pc0bcg2.png")) returned 0 [0113.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd19c) returned 1 [0113.079] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\TbVG3PC0bCG2.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\tbvg3pc0bcg2.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fbfb8) returned 1 [0113.079] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\TbVG3PC0bCG2.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\tbvg3pc0bcg2.png")) returned 0 [0113.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd19c) returned 1 [0113.079] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\TbVG3PC0bCG2.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\tbvg3pc0bcg2.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.080] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\TbVG3PC0bCG2.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\tbvg3pc0bcg2.png")) returned 0 [0113.080] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\TbVG3PC0bCG2.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\tbvg3pc0bcg2.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.080] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\TbVG3PC0bCG2.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\tbvg3pc0bcg2.png")) returned 0 [0113.081] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\TbVG3PC0bCG2.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\tbvg3pc0bcg2.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.081] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\TbVG3PC0bCG2.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\tbvg3pc0bcg2.png")) returned 0 [0113.081] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\XbvlKnZREA1k.mp3" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\xbvlknzrea1k.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x360 [0113.081] GetFileType (hFile=0x360) returned 0x1 [0113.081] GetFileType (hFile=0x360) returned 0x1 [0113.081] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\XbvlKnZREA1k.mp3.Poteston" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\xbvlknzrea1k.mp3.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x364 [0113.082] GetFileType (hFile=0x364) returned 0x1 [0113.082] GetFileType (hFile=0x364) returned 0x1 [0113.082] SetEndOfFile (hFile=0x364) returned 1 [0113.082] ReadFile (in: hFile=0x360, lpBuffer=0x265bb20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x265bb20*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.084] ReadFile (in: hFile=0x360, lpBuffer=0x265bb20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x265bb20*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.084] ReadFile (in: hFile=0x360, lpBuffer=0x265bb20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x265bb20*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.085] ReadFile (in: hFile=0x360, lpBuffer=0x265bb20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x265bb20*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.085] ReadFile (in: hFile=0x360, lpBuffer=0x265bb20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x265bb20*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.086] ReadFile (in: hFile=0x360, lpBuffer=0x265bb20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x265bb20*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.086] ReadFile (in: hFile=0x360, lpBuffer=0x265bb20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x265bb20*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.086] ReadFile (in: hFile=0x360, lpBuffer=0x265bb20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x265bb20*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.086] ReadFile (in: hFile=0x360, lpBuffer=0x265bb20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x265bb20*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.087] ReadFile (in: hFile=0x360, lpBuffer=0x265bb20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x265bb20*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.087] ReadFile (in: hFile=0x360, lpBuffer=0x265bb20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x265bb20*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.087] ReadFile (in: hFile=0x360, lpBuffer=0x265bb20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x265bb20*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.088] ReadFile (in: hFile=0x360, lpBuffer=0x265bb20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x265bb20*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.088] ReadFile (in: hFile=0x360, lpBuffer=0x265bb20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x265bb20*, lpNumberOfBytesRead=0x2fd224*=0x19a, lpOverlapped=0x0) returned 1 [0113.090] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\XbvlKnZREA1k.mp3" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\xbvlknzrea1k.mp3")) returned 1 [0113.092] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\XbvlKnZREA1k.mp3" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\xbvlknzrea1k.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.093] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\XbvlKnZREA1k.mp3" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\xbvlknzrea1k.mp3")) returned 0 [0113.093] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\XbvlKnZREA1k.mp3" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\xbvlknzrea1k.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.094] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\XbvlKnZREA1k.mp3" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\xbvlknzrea1k.mp3")) returned 0 [0113.094] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\XbvlKnZREA1k.mp3" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\xbvlknzrea1k.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.094] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\XbvlKnZREA1k.mp3" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\xbvlknzrea1k.mp3")) returned 0 [0113.095] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\XbvlKnZREA1k.mp3" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\xbvlknzrea1k.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.095] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\XbvlKnZREA1k.mp3" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\xbvlknzrea1k.mp3")) returned 0 [0113.095] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\XbvlKnZREA1k.mp3" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\xbvlknzrea1k.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.096] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\XbvlKnZREA1k.mp3" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\xbvlknzrea1k.mp3")) returned 0 [0113.096] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\XbvlKnZREA1k.mp3" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\xbvlknzrea1k.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.096] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\XbvlKnZREA1k.mp3" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\xbvlknzrea1k.mp3")) returned 0 [0113.096] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\XtD X6g3ZZH.m4a" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\xtd x6g3zzh.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x360 [0113.097] GetFileType (hFile=0x360) returned 0x1 [0113.097] GetFileType (hFile=0x360) returned 0x1 [0113.097] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\XtD X6g3ZZH.m4a.Poteston" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\xtd x6g3zzh.m4a.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x364 [0113.098] GetFileType (hFile=0x364) returned 0x1 [0113.098] GetFileType (hFile=0x364) returned 0x1 [0113.098] SetEndOfFile (hFile=0x364) returned 1 [0113.098] ReadFile (in: hFile=0x360, lpBuffer=0x2671018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x2671018*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.100] ReadFile (in: hFile=0x360, lpBuffer=0x2671018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x2671018*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.100] ReadFile (in: hFile=0x360, lpBuffer=0x2671018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x2671018*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.101] ReadFile (in: hFile=0x360, lpBuffer=0x2671018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x2671018*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.101] ReadFile (in: hFile=0x360, lpBuffer=0x2671018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x2671018*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.101] ReadFile (in: hFile=0x360, lpBuffer=0x2671018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x2671018*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.102] ReadFile (in: hFile=0x360, lpBuffer=0x2671018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x2671018*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.102] ReadFile (in: hFile=0x360, lpBuffer=0x2671018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x2671018*, lpNumberOfBytesRead=0x2fd224*=0x1000, lpOverlapped=0x0) returned 1 [0113.102] ReadFile (in: hFile=0x360, lpBuffer=0x2671018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x2671018*, lpNumberOfBytesRead=0x2fd224*=0x140, lpOverlapped=0x0) returned 1 [0113.103] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\XtD X6g3ZZH.m4a" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\xtd x6g3zzh.m4a")) returned 1 [0113.105] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\XtD X6g3ZZH.m4a" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\xtd x6g3zzh.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.105] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\XtD X6g3ZZH.m4a" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\xtd x6g3zzh.m4a")) returned 0 [0113.106] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\XtD X6g3ZZH.m4a" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\xtd x6g3zzh.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.106] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\XtD X6g3ZZH.m4a" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\xtd x6g3zzh.m4a")) returned 0 [0113.106] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\XtD X6g3ZZH.m4a" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\xtd x6g3zzh.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.107] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\XtD X6g3ZZH.m4a" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\xtd x6g3zzh.m4a")) returned 0 [0113.107] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\XtD X6g3ZZH.m4a" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\xtd x6g3zzh.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.107] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\XtD X6g3ZZH.m4a" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\xtd x6g3zzh.m4a")) returned 0 [0113.108] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\XtD X6g3ZZH.m4a" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\xtd x6g3zzh.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.108] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\XtD X6g3ZZH.m4a" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\xtd x6g3zzh.m4a")) returned 0 [0113.108] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\XtD X6g3ZZH.m4a" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\xtd x6g3zzh.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.109] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\XtD X6g3ZZH.m4a" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\xtd x6g3zzh.m4a")) returned 0 [0113.109] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x360 [0113.109] GetFileType (hFile=0x360) returned 0x1 [0113.110] GetFileType (hFile=0x360) returned 0x1 [0113.111] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\ixaXT-WqX0.swf" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ixaxt-wqx0.swf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x360 [0113.111] GetFileType (hFile=0x360) returned 0x1 [0113.111] GetFileType (hFile=0x360) returned 0x1 [0113.111] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\ixaXT-WqX0.swf.Poteston" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ixaxt-wqx0.swf.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x364 [0113.112] GetFileType (hFile=0x364) returned 0x1 [0113.112] GetFileType (hFile=0x364) returned 0x1 [0113.112] SetEndOfFile (hFile=0x364) returned 1 [0113.112] ReadFile (in: hFile=0x360, lpBuffer=0x26858bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x26858bc*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0113.114] ReadFile (in: hFile=0x360, lpBuffer=0x26858bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x26858bc*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0113.115] ReadFile (in: hFile=0x360, lpBuffer=0x26858bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x26858bc*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0113.115] ReadFile (in: hFile=0x360, lpBuffer=0x26858bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x26858bc*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0113.115] ReadFile (in: hFile=0x360, lpBuffer=0x26858bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x26858bc*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0113.116] ReadFile (in: hFile=0x360, lpBuffer=0x26858bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x26858bc*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0113.116] ReadFile (in: hFile=0x360, lpBuffer=0x26858bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x26858bc*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0113.116] ReadFile (in: hFile=0x360, lpBuffer=0x26858bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x26858bc*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0113.117] ReadFile (in: hFile=0x360, lpBuffer=0x26858bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x26858bc*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0113.117] ReadFile (in: hFile=0x360, lpBuffer=0x26858bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x26858bc*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0113.117] ReadFile (in: hFile=0x360, lpBuffer=0x26858bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x26858bc*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0113.118] ReadFile (in: hFile=0x360, lpBuffer=0x26858bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x26858bc*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0113.118] ReadFile (in: hFile=0x360, lpBuffer=0x26858bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x26858bc*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0113.119] ReadFile (in: hFile=0x360, lpBuffer=0x26858bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x26858bc*, lpNumberOfBytesRead=0x2fd760*=0xe88, lpOverlapped=0x0) returned 1 [0113.120] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\ixaXT-WqX0.swf" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ixaxt-wqx0.swf")) returned 1 [0113.122] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\ixaXT-WqX0.swf" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ixaxt-wqx0.swf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.122] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\ixaXT-WqX0.swf" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ixaxt-wqx0.swf")) returned 0 [0113.122] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\ixaXT-WqX0.swf" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ixaxt-wqx0.swf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.123] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\ixaXT-WqX0.swf" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ixaxt-wqx0.swf")) returned 0 [0113.123] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\ixaXT-WqX0.swf" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ixaxt-wqx0.swf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.124] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\ixaXT-WqX0.swf" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ixaxt-wqx0.swf")) returned 0 [0113.124] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x872e87c0, ftCreationTime.dwHighDateTime=0x1d75aab, ftLastAccessTime.dwLowDateTime=0x7f50f2b0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f50f2b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.124] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f404910, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f404910, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f404910, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x85a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2W4Hx.m4a.Poteston", cAlternateFileName="2W4HXM~1.POT")) returned 1 [0113.124] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f42aa70, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f42aa70, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f42aa70, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x14b20, dwReserved0=0x0, dwReserved1=0x0, cFileName="EoS9VOqOPP_4IHn.mp4.Poteston", cAlternateFileName="EOS9VO~1.POT")) returned 1 [0113.124] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f450bd0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f450bd0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f476d30, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x14630, dwReserved0=0x0, dwReserved1=0x0, cFileName="G ZkrQjDnE0.odt.Poteston", cAlternateFileName="GZKRQJ~1.POT")) returned 1 [0113.124] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f476d30, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f476d30, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f49ce90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x9880, dwReserved0=0x0, dwReserved1=0x0, cFileName="noCEUmxfykebkeyH9.flv.Poteston", cAlternateFileName="NOCEUM~1.POT")) returned 1 [0113.124] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f50f2b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f50f2b0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f50f2b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0113.124] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f49ce90, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f49ce90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4c2ff0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xb140, dwReserved0=0x0, dwReserved1=0x0, cFileName="TbVG3PC0bCG2.png.Poteston", cAlternateFileName="TBVG3P~1.POT")) returned 1 [0113.124] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4c2ff0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f4c2ff0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4e9150, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xd1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XbvlKnZREA1k.mp3.Poteston", cAlternateFileName="XBVLKN~1.POT")) returned 1 [0113.124] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4e9150, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f4e9150, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4e9150, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8150, dwReserved0=0x0, dwReserved1=0x0, cFileName="XtD X6g3ZZH.m4a.Poteston", cAlternateFileName="XTDX6G~1.POT")) returned 1 [0113.124] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4e9150, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f4e9150, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4e9150, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8150, dwReserved0=0x0, dwReserved1=0x0, cFileName="XtD X6g3ZZH.m4a.Poteston", cAlternateFileName="XTDX6G~1.POT")) returned 0 [0113.125] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x872e87c0, ftCreationTime.dwHighDateTime=0x1d75aab, ftLastAccessTime.dwLowDateTime=0x7f50f2b0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f50f2b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.125] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f404910, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f404910, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f404910, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x85a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2W4Hx.m4a.Poteston", cAlternateFileName="2W4HXM~1.POT")) returned 1 [0113.125] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f42aa70, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f42aa70, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f42aa70, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x14b20, dwReserved0=0x0, dwReserved1=0x0, cFileName="EoS9VOqOPP_4IHn.mp4.Poteston", cAlternateFileName="EOS9VO~1.POT")) returned 1 [0113.125] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f450bd0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f450bd0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f476d30, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x14630, dwReserved0=0x0, dwReserved1=0x0, cFileName="G ZkrQjDnE0.odt.Poteston", cAlternateFileName="GZKRQJ~1.POT")) returned 1 [0113.125] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f476d30, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f476d30, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f49ce90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x9880, dwReserved0=0x0, dwReserved1=0x0, cFileName="noCEUmxfykebkeyH9.flv.Poteston", cAlternateFileName="NOCEUM~1.POT")) returned 1 [0113.125] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f50f2b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f50f2b0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f50f2b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0113.125] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f49ce90, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f49ce90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4c2ff0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xb140, dwReserved0=0x0, dwReserved1=0x0, cFileName="TbVG3PC0bCG2.png.Poteston", cAlternateFileName="TBVG3P~1.POT")) returned 1 [0113.125] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4c2ff0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f4c2ff0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4e9150, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xd1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XbvlKnZREA1k.mp3.Poteston", cAlternateFileName="XBVLKN~1.POT")) returned 1 [0113.125] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4e9150, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f4e9150, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4e9150, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8150, dwReserved0=0x0, dwReserved1=0x0, cFileName="XtD X6g3ZZH.m4a.Poteston", cAlternateFileName="XTDX6G~1.POT")) returned 1 [0113.125] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0113.126] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x360 [0113.126] GetFileType (hFile=0x360) returned 0x1 [0113.126] GetFileType (hFile=0x360) returned 0x1 [0113.126] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt.Poteston" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x364 [0113.127] GetFileType (hFile=0x364) returned 0x1 [0113.127] GetFileType (hFile=0x364) returned 0x1 [0113.127] SetEndOfFile (hFile=0x364) returned 1 [0113.127] ReadFile (in: hFile=0x360, lpBuffer=0x26a37d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x26a37d8*, lpNumberOfBytesRead=0x2fd224*=0x33e, lpOverlapped=0x0) returned 1 [0113.129] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 1 [0113.130] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.130] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0113.131] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.131] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0113.131] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.132] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0113.132] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.132] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0113.132] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.133] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0113.133] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.134] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0113.134] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.134] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0113.136] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x360 [0113.136] GetFileType (hFile=0x360) returned 0x1 [0113.136] GetFileType (hFile=0x360) returned 0x1 [0113.137] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\TETQ.m4a" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\tetq.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x360 [0113.138] GetFileType (hFile=0x360) returned 0x1 [0113.138] GetFileType (hFile=0x360) returned 0x1 [0113.138] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\TETQ.m4a.Poteston" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\tetq.m4a.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x364 [0113.139] GetFileType (hFile=0x364) returned 0x1 [0113.139] GetFileType (hFile=0x364) returned 0x1 [0113.139] SetEndOfFile (hFile=0x364) returned 1 [0113.139] ReadFile (in: hFile=0x360, lpBuffer=0x26b6d78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x26b6d78*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0113.141] ReadFile (in: hFile=0x360, lpBuffer=0x26b6d78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x26b6d78*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0113.142] ReadFile (in: hFile=0x360, lpBuffer=0x26b6d78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x26b6d78*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0113.142] ReadFile (in: hFile=0x360, lpBuffer=0x26b6d78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x26b6d78*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0113.143] ReadFile (in: hFile=0x360, lpBuffer=0x26b6d78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x26b6d78*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0113.143] ReadFile (in: hFile=0x360, lpBuffer=0x26b6d78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x26b6d78*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0113.143] ReadFile (in: hFile=0x360, lpBuffer=0x26b6d78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x26b6d78*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0113.144] ReadFile (in: hFile=0x360, lpBuffer=0x26b6d78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x26b6d78*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0113.144] ReadFile (in: hFile=0x360, lpBuffer=0x26b6d78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x26b6d78*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0113.145] ReadFile (in: hFile=0x360, lpBuffer=0x26b6d78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x26b6d78*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0113.145] ReadFile (in: hFile=0x360, lpBuffer=0x26b6d78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x26b6d78*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0113.146] ReadFile (in: hFile=0x360, lpBuffer=0x26b6d78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x26b6d78*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0113.146] ReadFile (in: hFile=0x360, lpBuffer=0x26b6d78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x26b6d78*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0113.146] ReadFile (in: hFile=0x360, lpBuffer=0x26b6d78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x26b6d78*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0113.147] ReadFile (in: hFile=0x360, lpBuffer=0x26b6d78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x26b6d78*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0113.147] ReadFile (in: hFile=0x360, lpBuffer=0x26b6d78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x26b6d78*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0113.148] ReadFile (in: hFile=0x360, lpBuffer=0x26b6d78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x26b6d78*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0113.148] ReadFile (in: hFile=0x360, lpBuffer=0x26b6d78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x26b6d78*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0113.148] ReadFile (in: hFile=0x360, lpBuffer=0x26b6d78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x26b6d78*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0113.149] ReadFile (in: hFile=0x360, lpBuffer=0x26b6d78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x26b6d78*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0113.149] ReadFile (in: hFile=0x360, lpBuffer=0x26b6d78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x26b6d78*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0113.149] ReadFile (in: hFile=0x360, lpBuffer=0x26b6d78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x26b6d78*, lpNumberOfBytesRead=0x2fd760*=0x2b4, lpOverlapped=0x0) returned 1 [0113.150] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\TETQ.m4a" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\tetq.m4a")) returned 1 [0113.152] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\TETQ.m4a" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\tetq.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.153] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\TETQ.m4a" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\tetq.m4a")) returned 0 [0113.153] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\TETQ.m4a" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\tetq.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.154] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\TETQ.m4a" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\tetq.m4a")) returned 0 [0113.154] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\TETQ.m4a" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\tetq.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.154] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\TETQ.m4a" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\tetq.m4a")) returned 0 [0113.155] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x872e87c0, ftCreationTime.dwHighDateTime=0x1d75aab, ftLastAccessTime.dwLowDateTime=0x7f55b570, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f55b570, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.155] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f404910, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f404910, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f404910, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x85a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2W4Hx.m4a.Poteston", cAlternateFileName="2W4HXM~1.POT")) returned 1 [0113.155] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f42aa70, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f42aa70, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f42aa70, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x14b20, dwReserved0=0x0, dwReserved1=0x0, cFileName="EoS9VOqOPP_4IHn.mp4.Poteston", cAlternateFileName="EOS9VO~1.POT")) returned 1 [0113.155] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f450bd0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f450bd0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f476d30, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x14630, dwReserved0=0x0, dwReserved1=0x0, cFileName="G ZkrQjDnE0.odt.Poteston", cAlternateFileName="GZKRQJ~1.POT")) returned 1 [0113.155] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f476d30, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f476d30, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f49ce90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x9880, dwReserved0=0x0, dwReserved1=0x0, cFileName="noCEUmxfykebkeyH9.flv.Poteston", cAlternateFileName="NOCEUM~1.POT")) returned 1 [0113.155] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f50f2b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f55b570, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f55b570, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0113.155] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f535410, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f535410, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f535410, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0113.155] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f49ce90, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f49ce90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4c2ff0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xb140, dwReserved0=0x0, dwReserved1=0x0, cFileName="TbVG3PC0bCG2.png.Poteston", cAlternateFileName="TBVG3P~1.POT")) returned 1 [0113.155] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4c2ff0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f4c2ff0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4e9150, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xd1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XbvlKnZREA1k.mp3.Poteston", cAlternateFileName="XBVLKN~1.POT")) returned 1 [0113.155] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4e9150, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f4e9150, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4e9150, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8150, dwReserved0=0x0, dwReserved1=0x0, cFileName="XtD X6g3ZZH.m4a.Poteston", cAlternateFileName="XTDX6G~1.POT")) returned 1 [0113.155] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4e9150, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f4e9150, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4e9150, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8150, dwReserved0=0x0, dwReserved1=0x0, cFileName="XtD X6g3ZZH.m4a.Poteston", cAlternateFileName="XTDX6G~1.POT")) returned 0 [0113.156] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x872e87c0, ftCreationTime.dwHighDateTime=0x1d75aab, ftLastAccessTime.dwLowDateTime=0x7f55b570, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f55b570, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.156] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f404910, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f404910, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f404910, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x85a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2W4Hx.m4a.Poteston", cAlternateFileName="2W4HXM~1.POT")) returned 1 [0113.156] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f42aa70, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f42aa70, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f42aa70, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x14b20, dwReserved0=0x0, dwReserved1=0x0, cFileName="EoS9VOqOPP_4IHn.mp4.Poteston", cAlternateFileName="EOS9VO~1.POT")) returned 1 [0113.156] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f450bd0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f450bd0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f476d30, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x14630, dwReserved0=0x0, dwReserved1=0x0, cFileName="G ZkrQjDnE0.odt.Poteston", cAlternateFileName="GZKRQJ~1.POT")) returned 1 [0113.156] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f476d30, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f476d30, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f49ce90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x9880, dwReserved0=0x0, dwReserved1=0x0, cFileName="noCEUmxfykebkeyH9.flv.Poteston", cAlternateFileName="NOCEUM~1.POT")) returned 1 [0113.156] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f50f2b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f55b570, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f55b570, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0113.156] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f535410, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f535410, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f535410, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0113.156] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f49ce90, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f49ce90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4c2ff0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xb140, dwReserved0=0x0, dwReserved1=0x0, cFileName="TbVG3PC0bCG2.png.Poteston", cAlternateFileName="TBVG3P~1.POT")) returned 1 [0113.156] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4c2ff0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f4c2ff0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4e9150, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xd1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XbvlKnZREA1k.mp3.Poteston", cAlternateFileName="XBVLKN~1.POT")) returned 1 [0113.156] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4e9150, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f4e9150, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4e9150, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8150, dwReserved0=0x0, dwReserved1=0x0, cFileName="XtD X6g3ZZH.m4a.Poteston", cAlternateFileName="XTDX6G~1.POT")) returned 1 [0113.156] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0113.158] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x360 [0113.158] GetFileType (hFile=0x360) returned 0x1 [0113.158] GetFileType (hFile=0x360) returned 0x1 [0113.158] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt.Poteston" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x364 [0113.158] GetFileType (hFile=0x364) returned 0x1 [0113.158] GetFileType (hFile=0x364) returned 0x1 [0113.158] SetEndOfFile (hFile=0x364) returned 1 [0113.160] ReadFile (in: hFile=0x360, lpBuffer=0x26dd330, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x26dd330*, lpNumberOfBytesRead=0x2fd224*=0x33e, lpOverlapped=0x0) returned 1 [0113.161] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 1 [0113.162] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.163] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0113.163] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.163] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0113.163] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.164] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0113.164] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.165] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0113.165] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.165] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0113.166] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.166] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0113.167] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.167] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0113.167] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.168] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0113.170] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x360 [0113.170] GetFileType (hFile=0x360) returned 0x1 [0113.170] GetFileType (hFile=0x360) returned 0x1 [0113.172] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\z71-eOvw.m4a" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\z71-eovw.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x360 [0113.172] GetFileType (hFile=0x360) returned 0x1 [0113.172] GetFileType (hFile=0x360) returned 0x1 [0113.172] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\z71-eOvw.m4a.Poteston" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\z71-eovw.m4a.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x364 [0113.175] GetFileType (hFile=0x364) returned 0x1 [0113.175] GetFileType (hFile=0x364) returned 0x1 [0113.175] SetEndOfFile (hFile=0x364) returned 1 [0113.175] ReadFile (in: hFile=0x360, lpBuffer=0x26f4698, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x26f4698*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0113.177] ReadFile (in: hFile=0x360, lpBuffer=0x26f4698, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x26f4698*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0113.177] ReadFile (in: hFile=0x360, lpBuffer=0x26f4698, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x26f4698*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0113.178] ReadFile (in: hFile=0x360, lpBuffer=0x26f4698, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x26f4698*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0113.178] ReadFile (in: hFile=0x360, lpBuffer=0x26f4698, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x26f4698*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0113.178] ReadFile (in: hFile=0x360, lpBuffer=0x26f4698, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x26f4698*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0113.179] ReadFile (in: hFile=0x360, lpBuffer=0x26f4698, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x26f4698*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0113.179] ReadFile (in: hFile=0x360, lpBuffer=0x26f4698, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x26f4698*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0113.179] ReadFile (in: hFile=0x360, lpBuffer=0x26f4698, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x26f4698*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0113.180] ReadFile (in: hFile=0x360, lpBuffer=0x26f4698, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x26f4698*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0113.180] ReadFile (in: hFile=0x360, lpBuffer=0x26f4698, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x26f4698*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0113.181] ReadFile (in: hFile=0x360, lpBuffer=0x26f4698, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x26f4698*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0113.181] ReadFile (in: hFile=0x360, lpBuffer=0x26f4698, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x26f4698*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0113.182] ReadFile (in: hFile=0x360, lpBuffer=0x26f4698, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x26f4698*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0113.182] ReadFile (in: hFile=0x360, lpBuffer=0x26f4698, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x26f4698*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0113.183] ReadFile (in: hFile=0x360, lpBuffer=0x26f4698, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x26f4698*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0113.183] ReadFile (in: hFile=0x360, lpBuffer=0x26f4698, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x26f4698*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0113.183] ReadFile (in: hFile=0x360, lpBuffer=0x26f4698, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x26f4698*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0113.184] ReadFile (in: hFile=0x360, lpBuffer=0x26f4698, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x26f4698*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0113.184] ReadFile (in: hFile=0x360, lpBuffer=0x26f4698, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x26f4698*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0113.185] ReadFile (in: hFile=0x360, lpBuffer=0x26f4698, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x26f4698*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0113.185] ReadFile (in: hFile=0x360, lpBuffer=0x26f4698, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x26f4698*, lpNumberOfBytesRead=0x2fd760*=0x1000, lpOverlapped=0x0) returned 1 [0113.185] ReadFile (in: hFile=0x360, lpBuffer=0x26f4698, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x26f4698*, lpNumberOfBytesRead=0x2fd760*=0x965, lpOverlapped=0x0) returned 1 [0113.186] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\z71-eOvw.m4a" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\z71-eovw.m4a")) returned 1 [0113.188] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\z71-eOvw.m4a" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\z71-eovw.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.188] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\z71-eOvw.m4a" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\z71-eovw.m4a")) returned 0 [0113.189] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\z71-eOvw.m4a" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\z71-eovw.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.189] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\z71-eOvw.m4a" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\z71-eovw.m4a")) returned 0 [0113.189] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\z71-eOvw.m4a" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\z71-eovw.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.190] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\z71-eOvw.m4a" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\z71-eovw.m4a")) returned 0 [0113.216] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x872e87c0, ftCreationTime.dwHighDateTime=0x1d75aab, ftLastAccessTime.dwLowDateTime=0x7f5a7830, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f5a7830, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.216] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f404910, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f404910, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f404910, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x85a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2W4Hx.m4a.Poteston", cAlternateFileName="2W4HXM~1.POT")) returned 1 [0113.216] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f42aa70, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f42aa70, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f42aa70, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x14b20, dwReserved0=0x0, dwReserved1=0x0, cFileName="EoS9VOqOPP_4IHn.mp4.Poteston", cAlternateFileName="EOS9VO~1.POT")) returned 1 [0113.216] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f450bd0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f450bd0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f476d30, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x14630, dwReserved0=0x0, dwReserved1=0x0, cFileName="G ZkrQjDnE0.odt.Poteston", cAlternateFileName="GZKRQJ~1.POT")) returned 1 [0113.216] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f476d30, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f476d30, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f49ce90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x9880, dwReserved0=0x0, dwReserved1=0x0, cFileName="noCEUmxfykebkeyH9.flv.Poteston", cAlternateFileName="NOCEUM~1.POT")) returned 1 [0113.216] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f50f2b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f5a7830, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f5a7830, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0113.217] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f535410, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f535410, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f5816d0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0113.217] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f49ce90, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f49ce90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4c2ff0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xb140, dwReserved0=0x0, dwReserved1=0x0, cFileName="TbVG3PC0bCG2.png.Poteston", cAlternateFileName="TBVG3P~1.POT")) returned 1 [0113.217] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4c2ff0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f4c2ff0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4e9150, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xd1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XbvlKnZREA1k.mp3.Poteston", cAlternateFileName="XBVLKN~1.POT")) returned 1 [0113.217] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4e9150, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f4e9150, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4e9150, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8150, dwReserved0=0x0, dwReserved1=0x0, cFileName="XtD X6g3ZZH.m4a.Poteston", cAlternateFileName="XTDX6G~1.POT")) returned 1 [0113.217] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4e9150, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f4e9150, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4e9150, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8150, dwReserved0=0x0, dwReserved1=0x0, cFileName="XtD X6g3ZZH.m4a.Poteston", cAlternateFileName="XTDX6G~1.POT")) returned 0 [0113.217] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x872e87c0, ftCreationTime.dwHighDateTime=0x1d75aab, ftLastAccessTime.dwLowDateTime=0x7f5a7830, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f5a7830, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.217] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f404910, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f404910, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f404910, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x85a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2W4Hx.m4a.Poteston", cAlternateFileName="2W4HXM~1.POT")) returned 1 [0113.217] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f42aa70, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f42aa70, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f42aa70, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x14b20, dwReserved0=0x0, dwReserved1=0x0, cFileName="EoS9VOqOPP_4IHn.mp4.Poteston", cAlternateFileName="EOS9VO~1.POT")) returned 1 [0113.217] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f450bd0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f450bd0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f476d30, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x14630, dwReserved0=0x0, dwReserved1=0x0, cFileName="G ZkrQjDnE0.odt.Poteston", cAlternateFileName="GZKRQJ~1.POT")) returned 1 [0113.217] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f476d30, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f476d30, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f49ce90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x9880, dwReserved0=0x0, dwReserved1=0x0, cFileName="noCEUmxfykebkeyH9.flv.Poteston", cAlternateFileName="NOCEUM~1.POT")) returned 1 [0113.217] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f50f2b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f5a7830, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f5a7830, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0113.217] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f535410, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f535410, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f5816d0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0113.217] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f49ce90, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f49ce90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4c2ff0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xb140, dwReserved0=0x0, dwReserved1=0x0, cFileName="TbVG3PC0bCG2.png.Poteston", cAlternateFileName="TBVG3P~1.POT")) returned 1 [0113.217] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4c2ff0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f4c2ff0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4e9150, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xd1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XbvlKnZREA1k.mp3.Poteston", cAlternateFileName="XBVLKN~1.POT")) returned 1 [0113.217] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4e9150, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f4e9150, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4e9150, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8150, dwReserved0=0x0, dwReserved1=0x0, cFileName="XtD X6g3ZZH.m4a.Poteston", cAlternateFileName="XTDX6G~1.POT")) returned 1 [0113.218] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0113.218] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x360 [0113.219] GetFileType (hFile=0x360) returned 0x1 [0113.219] GetFileType (hFile=0x360) returned 0x1 [0113.219] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt.Poteston" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x364 [0113.219] GetFileType (hFile=0x364) returned 0x1 [0113.219] GetFileType (hFile=0x364) returned 0x1 [0113.219] SetEndOfFile (hFile=0x364) returned 1 [0113.220] ReadFile (in: hFile=0x360, lpBuffer=0x253c154, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x253c154*, lpNumberOfBytesRead=0x2fd224*=0x33e, lpOverlapped=0x0) returned 1 [0113.221] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 1 [0113.222] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.223] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0113.223] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.224] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0113.224] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.224] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0113.225] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.225] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0113.225] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.226] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0113.226] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.226] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0113.226] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.227] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0113.227] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.227] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0113.228] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x374 [0113.232] GetFileType (hFile=0x374) returned 0x1 [0113.232] GetFileType (hFile=0x374) returned 0x1 [0113.233] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x374 [0113.234] GetFileType (hFile=0x374) returned 0x1 [0113.234] GetFileType (hFile=0x374) returned 0x1 [0113.235] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\677aEP3NVPVTqr.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\677aep3nvpvtqr.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x374 [0113.236] GetFileType (hFile=0x374) returned 0x1 [0113.236] GetFileType (hFile=0x374) returned 0x1 [0113.236] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\677aEP3NVPVTqr.jpg.Poteston" (normalized: "c:\\users\\keecfmwgj\\desktop\\677aep3nvpvtqr.jpg.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x370 [0113.237] GetFileType (hFile=0x370) returned 0x1 [0113.237] GetFileType (hFile=0x370) returned 0x1 [0113.237] SetEndOfFile (hFile=0x370) returned 1 [0113.238] ReadFile (in: hFile=0x374, lpBuffer=0x2557aac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fdc9c, lpOverlapped=0x0 | out: lpBuffer=0x2557aac*, lpNumberOfBytesRead=0x2fdc9c*=0x1000, lpOverlapped=0x0) returned 1 [0113.239] ReadFile (in: hFile=0x374, lpBuffer=0x2557aac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fdc9c, lpOverlapped=0x0 | out: lpBuffer=0x2557aac*, lpNumberOfBytesRead=0x2fdc9c*=0x1000, lpOverlapped=0x0) returned 1 [0113.240] ReadFile (in: hFile=0x374, lpBuffer=0x2557aac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fdc9c, lpOverlapped=0x0 | out: lpBuffer=0x2557aac*, lpNumberOfBytesRead=0x2fdc9c*=0x61d, lpOverlapped=0x0) returned 1 [0113.240] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\677aEP3NVPVTqr.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\677aep3nvpvtqr.jpg")) returned 1 [0113.243] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\677aEP3NVPVTqr.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\677aep3nvpvtqr.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.243] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\677aEP3NVPVTqr.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\677aep3nvpvtqr.jpg")) returned 0 [0113.243] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\677aEP3NVPVTqr.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\677aep3nvpvtqr.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.244] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\677aEP3NVPVTqr.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\677aep3nvpvtqr.jpg")) returned 0 [0113.244] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\677aEP3NVPVTqr.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\677aep3nvpvtqr.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.245] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\677aEP3NVPVTqr.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\677aep3nvpvtqr.jpg")) returned 0 [0113.245] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\677aEP3NVPVTqr.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\677aep3nvpvtqr.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.245] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\677aEP3NVPVTqr.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\677aep3nvpvtqr.jpg")) returned 0 [0113.245] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\677aEP3NVPVTqr.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\677aep3nvpvtqr.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.246] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\677aEP3NVPVTqr.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\677aep3nvpvtqr.jpg")) returned 0 [0113.246] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\677aEP3NVPVTqr.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\677aep3nvpvtqr.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.246] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\677aEP3NVPVTqr.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\677aep3nvpvtqr.jpg")) returned 0 [0113.246] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\677aEP3NVPVTqr.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\677aep3nvpvtqr.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.247] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\677aEP3NVPVTqr.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\677aep3nvpvtqr.jpg")) returned 0 [0113.247] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\677aEP3NVPVTqr.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\677aep3nvpvtqr.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.248] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\677aEP3NVPVTqr.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\677aep3nvpvtqr.jpg")) returned 0 [0113.248] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\677aEP3NVPVTqr.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\677aep3nvpvtqr.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.248] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\677aEP3NVPVTqr.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\677aep3nvpvtqr.jpg")) returned 0 [0113.249] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\677aEP3NVPVTqr.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\677aep3nvpvtqr.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.249] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\677aEP3NVPVTqr.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\677aep3nvpvtqr.jpg")) returned 0 [0113.249] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\677aEP3NVPVTqr.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\677aep3nvpvtqr.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.250] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\677aEP3NVPVTqr.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\677aep3nvpvtqr.jpg")) returned 0 [0113.250] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\677aEP3NVPVTqr.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\677aep3nvpvtqr.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.251] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\677aEP3NVPVTqr.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\677aep3nvpvtqr.jpg")) returned 0 [0113.251] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\677aEP3NVPVTqr.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\677aep3nvpvtqr.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.251] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\677aEP3NVPVTqr.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\677aep3nvpvtqr.jpg")) returned 0 [0113.252] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\677aEP3NVPVTqr.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\677aep3nvpvtqr.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.252] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\677aEP3NVPVTqr.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\677aep3nvpvtqr.jpg")) returned 0 [0113.252] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\677aEP3NVPVTqr.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\677aep3nvpvtqr.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.253] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\677aEP3NVPVTqr.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\677aep3nvpvtqr.jpg")) returned 0 [0113.253] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\677aEP3NVPVTqr.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\677aep3nvpvtqr.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.253] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\677aEP3NVPVTqr.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\677aep3nvpvtqr.jpg")) returned 0 [0113.253] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\677aEP3NVPVTqr.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\677aep3nvpvtqr.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.254] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\677aEP3NVPVTqr.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\677aep3nvpvtqr.jpg")) returned 0 [0113.254] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\677aEP3NVPVTqr.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\677aep3nvpvtqr.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.254] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\677aEP3NVPVTqr.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\677aep3nvpvtqr.jpg")) returned 0 [0113.255] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\677aEP3NVPVTqr.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\677aep3nvpvtqr.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.255] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\677aEP3NVPVTqr.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\677aep3nvpvtqr.jpg")) returned 0 [0113.255] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\677aEP3NVPVTqr.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\677aep3nvpvtqr.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.256] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\677aEP3NVPVTqr.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\677aep3nvpvtqr.jpg")) returned 0 [0113.256] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\677aEP3NVPVTqr.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\677aep3nvpvtqr.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.256] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\677aEP3NVPVTqr.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\677aep3nvpvtqr.jpg")) returned 0 [0113.256] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\677aEP3NVPVTqr.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\677aep3nvpvtqr.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.257] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\677aEP3NVPVTqr.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\677aep3nvpvtqr.jpg")) returned 0 [0113.257] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\677aEP3NVPVTqr.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\677aep3nvpvtqr.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.257] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\677aEP3NVPVTqr.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\677aep3nvpvtqr.jpg")) returned 0 [0113.257] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\677aEP3NVPVTqr.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\677aep3nvpvtqr.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.258] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\677aEP3NVPVTqr.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\677aep3nvpvtqr.jpg")) returned 0 [0113.258] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\677aEP3NVPVTqr.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\677aep3nvpvtqr.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.258] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\677aEP3NVPVTqr.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\677aep3nvpvtqr.jpg")) returned 0 [0113.259] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\677aEP3NVPVTqr.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\677aep3nvpvtqr.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.259] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\677aEP3NVPVTqr.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\677aep3nvpvtqr.jpg")) returned 0 [0113.259] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\677aEP3NVPVTqr.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\677aep3nvpvtqr.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.259] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\677aEP3NVPVTqr.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\677aep3nvpvtqr.jpg")) returned 0 [0113.421] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\677aEP3NVPVTqr.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\677aep3nvpvtqr.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.422] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\677aEP3NVPVTqr.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\677aep3nvpvtqr.jpg")) returned 0 [0113.422] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\677aEP3NVPVTqr.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\677aep3nvpvtqr.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.423] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\677aEP3NVPVTqr.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\677aep3nvpvtqr.jpg")) returned 0 [0113.423] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\677aEP3NVPVTqr.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\677aep3nvpvtqr.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.423] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\677aEP3NVPVTqr.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\677aep3nvpvtqr.jpg")) returned 0 [0113.424] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fdb84 | out: lpFindFileData=0x2fdb84*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9d12120, ftCreationTime.dwHighDateTime=0x1d75823, ftLastAccessTime.dwLowDateTime=0x7f3de7b0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f3de7b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.424] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fdb84 | out: lpFindFileData=0x2fdb84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f287b50, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f287b50, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f2adcb0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x74b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DJIlxXh.pptx.Poteston", cAlternateFileName="DJILXX~1.POT")) returned 1 [0113.424] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fdb84 | out: lpFindFileData=0x2fdb84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f2adcb0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f2adcb0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f2d3e10, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x143f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="epH-_N hU0l.jpg.Poteston", cAlternateFileName="EPH-_N~1.POT")) returned 1 [0113.424] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fdb84 | out: lpFindFileData=0x2fdb84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f2f9f70, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f2f9f70, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f3200d0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x2dc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nGUytBPJlqP.rtf.Poteston", cAlternateFileName="NGUYTB~1.POT")) returned 1 [0113.424] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fdb84 | out: lpFindFileData=0x2fdb84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f3de7b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f3de7b0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f3de7b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0113.424] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fdb84 | out: lpFindFileData=0x2fdb84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f3200d0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f3200d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f346230, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xe430, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPnXfcP7CFdFT0XeBuv6.ots.Poteston", cAlternateFileName="SPNXFC~1.POT")) returned 1 [0113.424] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fdb84 | out: lpFindFileData=0x2fdb84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f36c390, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f36c390, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f36c390, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="UapJbgd7.flv.Poteston", cAlternateFileName="UAPJBG~1.POT")) returned 1 [0113.424] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fdb84 | out: lpFindFileData=0x2fdb84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f3924f0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f3924f0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f3b8650, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xcd80, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc-4n.png.Poteston", cAlternateFileName="VC-4NP~1.POT")) returned 1 [0113.424] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fdb84 | out: lpFindFileData=0x2fdb84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f3924f0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f3924f0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f3b8650, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xcd80, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc-4n.png.Poteston", cAlternateFileName="VC-4NP~1.POT")) returned 0 [0113.424] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fdb84 | out: lpFindFileData=0x2fdb84*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9d12120, ftCreationTime.dwHighDateTime=0x1d75823, ftLastAccessTime.dwLowDateTime=0x7f3de7b0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f3de7b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.424] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fdb84 | out: lpFindFileData=0x2fdb84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f287b50, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f287b50, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f2adcb0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x74b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DJIlxXh.pptx.Poteston", cAlternateFileName="DJILXX~1.POT")) returned 1 [0113.425] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fdb84 | out: lpFindFileData=0x2fdb84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f2adcb0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f2adcb0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f2d3e10, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x143f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="epH-_N hU0l.jpg.Poteston", cAlternateFileName="EPH-_N~1.POT")) returned 1 [0113.425] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fdb84 | out: lpFindFileData=0x2fdb84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f2f9f70, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f2f9f70, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f3200d0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x2dc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nGUytBPJlqP.rtf.Poteston", cAlternateFileName="NGUYTB~1.POT")) returned 1 [0113.425] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fdb84 | out: lpFindFileData=0x2fdb84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f3de7b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f3de7b0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f3de7b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0113.425] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fdb84 | out: lpFindFileData=0x2fdb84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f3200d0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f3200d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f346230, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xe430, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPnXfcP7CFdFT0XeBuv6.ots.Poteston", cAlternateFileName="SPNXFC~1.POT")) returned 1 [0113.425] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fdb84 | out: lpFindFileData=0x2fdb84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f36c390, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f36c390, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f36c390, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="UapJbgd7.flv.Poteston", cAlternateFileName="UAPJBG~1.POT")) returned 1 [0113.425] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fdb84 | out: lpFindFileData=0x2fdb84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f3924f0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f3924f0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f3b8650, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xcd80, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc-4n.png.Poteston", cAlternateFileName="VC-4NP~1.POT")) returned 1 [0113.425] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fdb84 | out: lpFindFileData=0x2fdb84*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0113.425] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x374 [0113.426] GetFileType (hFile=0x374) returned 0x1 [0113.426] GetFileType (hFile=0x374) returned 0x1 [0113.426] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt.Poteston" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\readme.txt.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x370 [0113.427] GetFileType (hFile=0x370) returned 0x1 [0113.427] GetFileType (hFile=0x370) returned 0x1 [0113.427] SetEndOfFile (hFile=0x370) returned 1 [0113.427] ReadFile (in: hFile=0x374, lpBuffer=0x257c364, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x257c364*, lpNumberOfBytesRead=0x2fd760*=0x33e, lpOverlapped=0x0) returned 1 [0113.432] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\readme.txt")) returned 1 [0113.433] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.434] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\readme.txt")) returned 0 [0113.434] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.434] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\readme.txt")) returned 0 [0113.435] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.435] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\readme.txt")) returned 0 [0113.435] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.436] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\readme.txt")) returned 0 [0113.436] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.436] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\readme.txt")) returned 0 [0113.436] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.437] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\readme.txt")) returned 0 [0113.437] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x374 [0113.438] GetFileType (hFile=0x374) returned 0x1 [0113.438] GetFileType (hFile=0x374) returned 0x1 [0113.440] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fdb84 | out: lpFindFileData=0x2fdb84*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x995dc4c0, ftCreationTime.dwHighDateTime=0x1d75438, ftLastAccessTime.dwLowDateTime=0x7f63fdb0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f63fdb0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.440] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fdb84 | out: lpFindFileData=0x2fdb84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f3de7b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f3de7b0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f3de7b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x29f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="7du2.gif.Poteston", cAlternateFileName="7DU2GI~1.POT")) returned 1 [0113.440] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fdb84 | out: lpFindFileData=0x2fdb84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f50f2b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f50f2b0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f535410, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xde90, dwReserved0=0x0, dwReserved1=0x0, cFileName="ixaXT-WqX0.swf.Poteston", cAlternateFileName="IXAXT-~1.POT")) returned 1 [0113.440] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fdb84 | out: lpFindFileData=0x2fdb84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f63fdb0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f63fdb0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f63fdb0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0113.440] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fdb84 | out: lpFindFileData=0x2fdb84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f55b570, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f55b570, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f55b570, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x152c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TETQ.m4a.Poteston", cAlternateFileName="TETQM4~1.POT")) returned 1 [0113.440] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fdb84 | out: lpFindFileData=0x2fdb84*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x872e87c0, ftCreationTime.dwHighDateTime=0x1d75aab, ftLastAccessTime.dwLowDateTime=0x7f63fdb0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f63fdb0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UkCm4Dq_", cAlternateFileName="")) returned 1 [0113.440] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fdb84 | out: lpFindFileData=0x2fdb84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f5a7830, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f5a7830, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f5cd990, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x16970, dwReserved0=0x0, dwReserved1=0x0, cFileName="z71-eOvw.m4a.Poteston", cAlternateFileName="Z71-EO~1.POT")) returned 1 [0113.440] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fdb84 | out: lpFindFileData=0x2fdb84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f5a7830, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f5a7830, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f5cd990, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x16970, dwReserved0=0x0, dwReserved1=0x0, cFileName="z71-eOvw.m4a.Poteston", cAlternateFileName="Z71-EO~1.POT")) returned 0 [0113.440] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fdb84 | out: lpFindFileData=0x2fdb84*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x995dc4c0, ftCreationTime.dwHighDateTime=0x1d75438, ftLastAccessTime.dwLowDateTime=0x7f63fdb0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f63fdb0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.440] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fdb84 | out: lpFindFileData=0x2fdb84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f3de7b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f3de7b0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f3de7b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x29f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="7du2.gif.Poteston", cAlternateFileName="7DU2GI~1.POT")) returned 1 [0113.440] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fdb84 | out: lpFindFileData=0x2fdb84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f50f2b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f50f2b0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f535410, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xde90, dwReserved0=0x0, dwReserved1=0x0, cFileName="ixaXT-WqX0.swf.Poteston", cAlternateFileName="IXAXT-~1.POT")) returned 1 [0113.440] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fdb84 | out: lpFindFileData=0x2fdb84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f63fdb0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f63fdb0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f63fdb0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0113.440] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fdb84 | out: lpFindFileData=0x2fdb84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f55b570, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f55b570, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f55b570, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x152c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TETQ.m4a.Poteston", cAlternateFileName="TETQM4~1.POT")) returned 1 [0113.440] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fdb84 | out: lpFindFileData=0x2fdb84*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x872e87c0, ftCreationTime.dwHighDateTime=0x1d75aab, ftLastAccessTime.dwLowDateTime=0x7f63fdb0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f63fdb0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UkCm4Dq_", cAlternateFileName="")) returned 1 [0113.440] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fdb84 | out: lpFindFileData=0x2fdb84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f5a7830, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f5a7830, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f5cd990, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x16970, dwReserved0=0x0, dwReserved1=0x0, cFileName="z71-eOvw.m4a.Poteston", cAlternateFileName="Z71-EO~1.POT")) returned 1 [0113.440] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fdb84 | out: lpFindFileData=0x2fdb84*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0113.441] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x872e87c0, ftCreationTime.dwHighDateTime=0x1d75aab, ftLastAccessTime.dwLowDateTime=0x7f63fdb0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f63fdb0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.441] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f404910, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f404910, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f404910, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x85a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2W4Hx.m4a.Poteston", cAlternateFileName="2W4HXM~1.POT")) returned 1 [0113.441] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f42aa70, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f42aa70, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f42aa70, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x14b20, dwReserved0=0x0, dwReserved1=0x0, cFileName="EoS9VOqOPP_4IHn.mp4.Poteston", cAlternateFileName="EOS9VO~1.POT")) returned 1 [0113.441] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f450bd0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f450bd0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f476d30, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x14630, dwReserved0=0x0, dwReserved1=0x0, cFileName="G ZkrQjDnE0.odt.Poteston", cAlternateFileName="GZKRQJ~1.POT")) returned 1 [0113.441] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f476d30, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f476d30, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f49ce90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x9880, dwReserved0=0x0, dwReserved1=0x0, cFileName="noCEUmxfykebkeyH9.flv.Poteston", cAlternateFileName="NOCEUM~1.POT")) returned 1 [0113.441] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f50f2b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f63fdb0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f63fdb0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0113.441] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f535410, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f535410, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f619c50, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0113.441] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f49ce90, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f49ce90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4c2ff0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xb140, dwReserved0=0x0, dwReserved1=0x0, cFileName="TbVG3PC0bCG2.png.Poteston", cAlternateFileName="TBVG3P~1.POT")) returned 1 [0113.441] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4c2ff0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f4c2ff0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4e9150, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xd1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XbvlKnZREA1k.mp3.Poteston", cAlternateFileName="XBVLKN~1.POT")) returned 1 [0113.441] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4e9150, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f4e9150, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4e9150, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8150, dwReserved0=0x0, dwReserved1=0x0, cFileName="XtD X6g3ZZH.m4a.Poteston", cAlternateFileName="XTDX6G~1.POT")) returned 1 [0113.441] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4e9150, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f4e9150, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4e9150, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8150, dwReserved0=0x0, dwReserved1=0x0, cFileName="XtD X6g3ZZH.m4a.Poteston", cAlternateFileName="XTDX6G~1.POT")) returned 0 [0113.441] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x872e87c0, ftCreationTime.dwHighDateTime=0x1d75aab, ftLastAccessTime.dwLowDateTime=0x7f63fdb0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f63fdb0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.442] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f404910, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f404910, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f404910, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x85a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2W4Hx.m4a.Poteston", cAlternateFileName="2W4HXM~1.POT")) returned 1 [0113.442] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f42aa70, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f42aa70, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f42aa70, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x14b20, dwReserved0=0x0, dwReserved1=0x0, cFileName="EoS9VOqOPP_4IHn.mp4.Poteston", cAlternateFileName="EOS9VO~1.POT")) returned 1 [0113.442] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f450bd0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f450bd0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f476d30, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x14630, dwReserved0=0x0, dwReserved1=0x0, cFileName="G ZkrQjDnE0.odt.Poteston", cAlternateFileName="GZKRQJ~1.POT")) returned 1 [0113.442] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f476d30, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f476d30, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f49ce90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x9880, dwReserved0=0x0, dwReserved1=0x0, cFileName="noCEUmxfykebkeyH9.flv.Poteston", cAlternateFileName="NOCEUM~1.POT")) returned 1 [0113.442] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f50f2b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f63fdb0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f63fdb0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0113.442] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f535410, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f535410, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f619c50, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0113.442] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f49ce90, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f49ce90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4c2ff0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xb140, dwReserved0=0x0, dwReserved1=0x0, cFileName="TbVG3PC0bCG2.png.Poteston", cAlternateFileName="TBVG3P~1.POT")) returned 1 [0113.442] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4c2ff0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f4c2ff0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4e9150, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xd1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XbvlKnZREA1k.mp3.Poteston", cAlternateFileName="XBVLKN~1.POT")) returned 1 [0113.442] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4e9150, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f4e9150, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4e9150, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8150, dwReserved0=0x0, dwReserved1=0x0, cFileName="XtD X6g3ZZH.m4a.Poteston", cAlternateFileName="XTDX6G~1.POT")) returned 1 [0113.442] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0113.443] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x374 [0113.443] GetFileType (hFile=0x374) returned 0x1 [0113.443] GetFileType (hFile=0x374) returned 0x1 [0113.443] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt.Poteston" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x370 [0113.443] GetFileType (hFile=0x370) returned 0x1 [0113.443] GetFileType (hFile=0x370) returned 0x1 [0113.443] SetEndOfFile (hFile=0x370) returned 1 [0113.444] ReadFile (in: hFile=0x374, lpBuffer=0x259c9d4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x259c9d4*, lpNumberOfBytesRead=0x2fd224*=0x33e, lpOverlapped=0x0) returned 1 [0113.445] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 1 [0113.446] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.447] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0113.447] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.447] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0113.448] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.448] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0113.448] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.448] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0113.449] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.449] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0113.449] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.449] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0113.450] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.450] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0113.450] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.450] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0113.451] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x374 [0113.452] GetFileType (hFile=0x374) returned 0x1 [0113.452] GetFileType (hFile=0x374) returned 0x1 [0113.453] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x872e87c0, ftCreationTime.dwHighDateTime=0x1d75aab, ftLastAccessTime.dwLowDateTime=0x7f8550f0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f8550f0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.453] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f404910, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f404910, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f404910, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x85a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2W4Hx.m4a.Poteston", cAlternateFileName="2W4HXM~1.POT")) returned 1 [0113.453] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f42aa70, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f42aa70, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f42aa70, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x14b20, dwReserved0=0x0, dwReserved1=0x0, cFileName="EoS9VOqOPP_4IHn.mp4.Poteston", cAlternateFileName="EOS9VO~1.POT")) returned 1 [0113.453] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f450bd0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f450bd0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f476d30, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x14630, dwReserved0=0x0, dwReserved1=0x0, cFileName="G ZkrQjDnE0.odt.Poteston", cAlternateFileName="GZKRQJ~1.POT")) returned 1 [0113.453] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f476d30, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f476d30, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f49ce90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x9880, dwReserved0=0x0, dwReserved1=0x0, cFileName="noCEUmxfykebkeyH9.flv.Poteston", cAlternateFileName="NOCEUM~1.POT")) returned 1 [0113.453] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f50f2b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f8550f0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f8550f0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0113.453] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f535410, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f535410, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f82ef90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0113.453] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f49ce90, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f49ce90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4c2ff0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xb140, dwReserved0=0x0, dwReserved1=0x0, cFileName="TbVG3PC0bCG2.png.Poteston", cAlternateFileName="TBVG3P~1.POT")) returned 1 [0113.453] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4c2ff0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f4c2ff0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4e9150, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xd1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XbvlKnZREA1k.mp3.Poteston", cAlternateFileName="XBVLKN~1.POT")) returned 1 [0113.453] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4e9150, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f4e9150, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4e9150, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8150, dwReserved0=0x0, dwReserved1=0x0, cFileName="XtD X6g3ZZH.m4a.Poteston", cAlternateFileName="XTDX6G~1.POT")) returned 1 [0113.454] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4e9150, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f4e9150, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4e9150, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8150, dwReserved0=0x0, dwReserved1=0x0, cFileName="XtD X6g3ZZH.m4a.Poteston", cAlternateFileName="XTDX6G~1.POT")) returned 0 [0113.454] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x872e87c0, ftCreationTime.dwHighDateTime=0x1d75aab, ftLastAccessTime.dwLowDateTime=0x7f8550f0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f8550f0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.454] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f404910, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f404910, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f404910, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x85a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2W4Hx.m4a.Poteston", cAlternateFileName="2W4HXM~1.POT")) returned 1 [0113.454] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f42aa70, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f42aa70, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f42aa70, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x14b20, dwReserved0=0x0, dwReserved1=0x0, cFileName="EoS9VOqOPP_4IHn.mp4.Poteston", cAlternateFileName="EOS9VO~1.POT")) returned 1 [0113.454] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f450bd0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f450bd0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f476d30, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x14630, dwReserved0=0x0, dwReserved1=0x0, cFileName="G ZkrQjDnE0.odt.Poteston", cAlternateFileName="GZKRQJ~1.POT")) returned 1 [0113.454] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f476d30, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f476d30, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f49ce90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x9880, dwReserved0=0x0, dwReserved1=0x0, cFileName="noCEUmxfykebkeyH9.flv.Poteston", cAlternateFileName="NOCEUM~1.POT")) returned 1 [0113.454] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f50f2b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f8550f0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f8550f0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0113.454] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f535410, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f535410, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f82ef90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0113.454] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f49ce90, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f49ce90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4c2ff0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xb140, dwReserved0=0x0, dwReserved1=0x0, cFileName="TbVG3PC0bCG2.png.Poteston", cAlternateFileName="TBVG3P~1.POT")) returned 1 [0113.454] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4c2ff0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f4c2ff0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4e9150, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xd1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XbvlKnZREA1k.mp3.Poteston", cAlternateFileName="XBVLKN~1.POT")) returned 1 [0113.454] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4e9150, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f4e9150, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4e9150, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8150, dwReserved0=0x0, dwReserved1=0x0, cFileName="XtD X6g3ZZH.m4a.Poteston", cAlternateFileName="XTDX6G~1.POT")) returned 1 [0113.454] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0113.455] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x374 [0113.455] GetFileType (hFile=0x374) returned 0x1 [0113.455] GetFileType (hFile=0x374) returned 0x1 [0113.455] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt.Poteston" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x370 [0113.455] GetFileType (hFile=0x370) returned 0x1 [0113.455] GetFileType (hFile=0x370) returned 0x1 [0113.456] SetEndOfFile (hFile=0x370) returned 1 [0113.456] ReadFile (in: hFile=0x374, lpBuffer=0x25c090c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd224, lpOverlapped=0x0 | out: lpBuffer=0x25c090c*, lpNumberOfBytesRead=0x2fd224*=0x33e, lpOverlapped=0x0) returned 1 [0113.458] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 1 [0113.459] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.459] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0113.460] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.460] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0113.460] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.461] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0113.461] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.461] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0113.462] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.462] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0113.462] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.537] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0113.537] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.538] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0113.538] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.539] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0113.540] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x374 [0113.540] GetFileType (hFile=0x374) returned 0x1 [0113.540] GetFileType (hFile=0x374) returned 0x1 [0113.542] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x374 [0113.542] GetFileType (hFile=0x374) returned 0x1 [0113.542] GetFileType (hFile=0x374) returned 0x1 [0113.542] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\readme.txt.Poteston" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\readme.txt.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x370 [0113.543] GetFileType (hFile=0x370) returned 0x1 [0113.543] GetFileType (hFile=0x370) returned 0x1 [0113.543] SetEndOfFile (hFile=0x370) returned 1 [0113.543] ReadFile (in: hFile=0x374, lpBuffer=0x25d7c64, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fd760, lpOverlapped=0x0 | out: lpBuffer=0x25d7c64*, lpNumberOfBytesRead=0x2fd760*=0x33e, lpOverlapped=0x0) returned 1 [0113.545] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\readme.txt")) returned 1 [0113.546] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.547] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\readme.txt")) returned 0 [0113.547] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.548] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\readme.txt")) returned 0 [0113.548] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\readme.txt")) returned 0 [0113.549] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\readme.txt")) returned 0 [0113.549] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x872e87c0, ftCreationTime.dwHighDateTime=0x1d75aab, ftLastAccessTime.dwLowDateTime=0x7f9137d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f9137d0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.549] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f404910, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f404910, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f404910, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x85a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2W4Hx.m4a.Poteston", cAlternateFileName="2W4HXM~1.POT")) returned 1 [0113.549] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f42aa70, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f42aa70, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f42aa70, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x14b20, dwReserved0=0x0, dwReserved1=0x0, cFileName="EoS9VOqOPP_4IHn.mp4.Poteston", cAlternateFileName="EOS9VO~1.POT")) returned 1 [0113.549] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f450bd0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f450bd0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f476d30, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x14630, dwReserved0=0x0, dwReserved1=0x0, cFileName="G ZkrQjDnE0.odt.Poteston", cAlternateFileName="GZKRQJ~1.POT")) returned 1 [0113.549] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f476d30, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f476d30, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f49ce90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x9880, dwReserved0=0x0, dwReserved1=0x0, cFileName="noCEUmxfykebkeyH9.flv.Poteston", cAlternateFileName="NOCEUM~1.POT")) returned 1 [0113.550] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f50f2b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f9137d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f939930, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0113.550] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f535410, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f535410, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f8550f0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0113.550] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f49ce90, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f49ce90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4c2ff0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xb140, dwReserved0=0x0, dwReserved1=0x0, cFileName="TbVG3PC0bCG2.png.Poteston", cAlternateFileName="TBVG3P~1.POT")) returned 1 [0113.550] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4c2ff0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f4c2ff0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4e9150, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xd1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XbvlKnZREA1k.mp3.Poteston", cAlternateFileName="XBVLKN~1.POT")) returned 1 [0113.550] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4e9150, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f4e9150, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4e9150, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8150, dwReserved0=0x0, dwReserved1=0x0, cFileName="XtD X6g3ZZH.m4a.Poteston", cAlternateFileName="XTDX6G~1.POT")) returned 1 [0113.550] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4e9150, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f4e9150, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4e9150, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8150, dwReserved0=0x0, dwReserved1=0x0, cFileName="XtD X6g3ZZH.m4a.Poteston", cAlternateFileName="XTDX6G~1.POT")) returned 0 [0113.550] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x872e87c0, ftCreationTime.dwHighDateTime=0x1d75aab, ftLastAccessTime.dwLowDateTime=0x7f9137d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f9137d0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.550] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f404910, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f404910, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f404910, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x85a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2W4Hx.m4a.Poteston", cAlternateFileName="2W4HXM~1.POT")) returned 1 [0113.550] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f42aa70, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f42aa70, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f42aa70, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x14b20, dwReserved0=0x0, dwReserved1=0x0, cFileName="EoS9VOqOPP_4IHn.mp4.Poteston", cAlternateFileName="EOS9VO~1.POT")) returned 1 [0113.550] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f450bd0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f450bd0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f476d30, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x14630, dwReserved0=0x0, dwReserved1=0x0, cFileName="G ZkrQjDnE0.odt.Poteston", cAlternateFileName="GZKRQJ~1.POT")) returned 1 [0113.550] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f476d30, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f476d30, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f49ce90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x9880, dwReserved0=0x0, dwReserved1=0x0, cFileName="noCEUmxfykebkeyH9.flv.Poteston", cAlternateFileName="NOCEUM~1.POT")) returned 1 [0113.550] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f50f2b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f9137d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f939930, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0113.550] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f535410, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f535410, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f8550f0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0113.550] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f49ce90, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f49ce90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4c2ff0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xb140, dwReserved0=0x0, dwReserved1=0x0, cFileName="TbVG3PC0bCG2.png.Poteston", cAlternateFileName="TBVG3P~1.POT")) returned 1 [0113.551] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4c2ff0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f4c2ff0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4e9150, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xd1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XbvlKnZREA1k.mp3.Poteston", cAlternateFileName="XBVLKN~1.POT")) returned 1 [0113.551] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4e9150, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f4e9150, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4e9150, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8150, dwReserved0=0x0, dwReserved1=0x0, cFileName="XtD X6g3ZZH.m4a.Poteston", cAlternateFileName="XTDX6G~1.POT")) returned 1 [0113.551] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0113.552] SetEndOfFile (hFile=0x370) returned 1 [0113.554] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 1 [0113.556] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0113.580] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0113.580] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0113.581] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0113.581] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0113.582] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0113.582] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0113.584] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0113.588] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x872e87c0, ftCreationTime.dwHighDateTime=0x1d75aab, ftLastAccessTime.dwLowDateTime=0x7f985bf0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f985bf0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.588] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f404910, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f404910, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f404910, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x85a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2W4Hx.m4a.Poteston", cAlternateFileName="2W4HXM~1.POT")) returned 1 [0113.588] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f42aa70, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f42aa70, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f42aa70, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x14b20, dwReserved0=0x0, dwReserved1=0x0, cFileName="EoS9VOqOPP_4IHn.mp4.Poteston", cAlternateFileName="EOS9VO~1.POT")) returned 1 [0113.588] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f450bd0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f450bd0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f476d30, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x14630, dwReserved0=0x0, dwReserved1=0x0, cFileName="G ZkrQjDnE0.odt.Poteston", cAlternateFileName="GZKRQJ~1.POT")) returned 1 [0113.588] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f476d30, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f476d30, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f49ce90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x9880, dwReserved0=0x0, dwReserved1=0x0, cFileName="noCEUmxfykebkeyH9.flv.Poteston", cAlternateFileName="NOCEUM~1.POT")) returned 1 [0113.588] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f50f2b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f985bf0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f985bf0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0113.588] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f535410, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f535410, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f939930, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0113.588] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f49ce90, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f49ce90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4c2ff0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xb140, dwReserved0=0x0, dwReserved1=0x0, cFileName="TbVG3PC0bCG2.png.Poteston", cAlternateFileName="TBVG3P~1.POT")) returned 1 [0113.588] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4c2ff0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f4c2ff0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4e9150, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xd1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XbvlKnZREA1k.mp3.Poteston", cAlternateFileName="XBVLKN~1.POT")) returned 1 [0113.588] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4e9150, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f4e9150, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4e9150, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8150, dwReserved0=0x0, dwReserved1=0x0, cFileName="XtD X6g3ZZH.m4a.Poteston", cAlternateFileName="XTDX6G~1.POT")) returned 1 [0113.588] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4e9150, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f4e9150, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4e9150, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8150, dwReserved0=0x0, dwReserved1=0x0, cFileName="XtD X6g3ZZH.m4a.Poteston", cAlternateFileName="XTDX6G~1.POT")) returned 0 [0113.589] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x872e87c0, ftCreationTime.dwHighDateTime=0x1d75aab, ftLastAccessTime.dwLowDateTime=0x7f985bf0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f985bf0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.589] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f404910, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f404910, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f404910, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x85a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2W4Hx.m4a.Poteston", cAlternateFileName="2W4HXM~1.POT")) returned 1 [0113.589] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f42aa70, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f42aa70, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f42aa70, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x14b20, dwReserved0=0x0, dwReserved1=0x0, cFileName="EoS9VOqOPP_4IHn.mp4.Poteston", cAlternateFileName="EOS9VO~1.POT")) returned 1 [0113.589] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f450bd0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f450bd0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f476d30, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x14630, dwReserved0=0x0, dwReserved1=0x0, cFileName="G ZkrQjDnE0.odt.Poteston", cAlternateFileName="GZKRQJ~1.POT")) returned 1 [0113.589] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f476d30, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f476d30, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f49ce90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x9880, dwReserved0=0x0, dwReserved1=0x0, cFileName="noCEUmxfykebkeyH9.flv.Poteston", cAlternateFileName="NOCEUM~1.POT")) returned 1 [0113.589] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f50f2b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f985bf0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f985bf0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0113.589] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f535410, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f535410, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f939930, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0113.589] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f49ce90, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f49ce90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4c2ff0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xb140, dwReserved0=0x0, dwReserved1=0x0, cFileName="TbVG3PC0bCG2.png.Poteston", cAlternateFileName="TBVG3P~1.POT")) returned 1 [0113.589] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4c2ff0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f4c2ff0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4e9150, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xd1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XbvlKnZREA1k.mp3.Poteston", cAlternateFileName="XBVLKN~1.POT")) returned 1 [0113.589] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4e9150, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f4e9150, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4e9150, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8150, dwReserved0=0x0, dwReserved1=0x0, cFileName="XtD X6g3ZZH.m4a.Poteston", cAlternateFileName="XTDX6G~1.POT")) returned 1 [0113.589] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0113.590] SetEndOfFile (hFile=0x370) returned 1 [0113.593] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 1 [0113.594] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0113.595] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0113.595] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0113.596] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0113.597] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0113.598] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0113.598] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0113.599] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0113.602] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x872e87c0, ftCreationTime.dwHighDateTime=0x1d75aab, ftLastAccessTime.dwLowDateTime=0x7f9abd50, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f9abd50, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.602] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f404910, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f404910, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f404910, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x85a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2W4Hx.m4a.Poteston", cAlternateFileName="2W4HXM~1.POT")) returned 1 [0113.602] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f42aa70, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f42aa70, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f42aa70, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x14b20, dwReserved0=0x0, dwReserved1=0x0, cFileName="EoS9VOqOPP_4IHn.mp4.Poteston", cAlternateFileName="EOS9VO~1.POT")) returned 1 [0113.602] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f450bd0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f450bd0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f476d30, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x14630, dwReserved0=0x0, dwReserved1=0x0, cFileName="G ZkrQjDnE0.odt.Poteston", cAlternateFileName="GZKRQJ~1.POT")) returned 1 [0113.602] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f476d30, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f476d30, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f49ce90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x9880, dwReserved0=0x0, dwReserved1=0x0, cFileName="noCEUmxfykebkeyH9.flv.Poteston", cAlternateFileName="NOCEUM~1.POT")) returned 1 [0113.602] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f50f2b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f9abd50, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f9abd50, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0113.602] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f535410, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f535410, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f9abd50, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0113.602] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f49ce90, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f49ce90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4c2ff0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xb140, dwReserved0=0x0, dwReserved1=0x0, cFileName="TbVG3PC0bCG2.png.Poteston", cAlternateFileName="TBVG3P~1.POT")) returned 1 [0113.602] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4c2ff0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f4c2ff0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4e9150, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xd1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XbvlKnZREA1k.mp3.Poteston", cAlternateFileName="XBVLKN~1.POT")) returned 1 [0113.602] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4e9150, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f4e9150, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4e9150, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8150, dwReserved0=0x0, dwReserved1=0x0, cFileName="XtD X6g3ZZH.m4a.Poteston", cAlternateFileName="XTDX6G~1.POT")) returned 1 [0113.602] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4e9150, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f4e9150, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4e9150, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8150, dwReserved0=0x0, dwReserved1=0x0, cFileName="XtD X6g3ZZH.m4a.Poteston", cAlternateFileName="XTDX6G~1.POT")) returned 0 [0113.603] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x872e87c0, ftCreationTime.dwHighDateTime=0x1d75aab, ftLastAccessTime.dwLowDateTime=0x7f9abd50, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f9abd50, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.603] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f404910, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f404910, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f404910, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x85a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2W4Hx.m4a.Poteston", cAlternateFileName="2W4HXM~1.POT")) returned 1 [0113.612] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f42aa70, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f42aa70, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f42aa70, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x14b20, dwReserved0=0x0, dwReserved1=0x0, cFileName="EoS9VOqOPP_4IHn.mp4.Poteston", cAlternateFileName="EOS9VO~1.POT")) returned 1 [0113.612] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd648 | out: lpFindFileData=0x2fd648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f450bd0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f450bd0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f476d30, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x14630, dwReserved0=0x0, dwReserved1=0x0, cFileName="G ZkrQjDnE0.odt.Poteston", cAlternateFileName="GZKRQJ~1.POT")) returned 1 [0113.615] SetEndOfFile (hFile=0x370) returned 1 [0113.617] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 1 [0113.619] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0113.620] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0113.620] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0113.620] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0113.621] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0113.621] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0113.621] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0113.622] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0113.627] SetEndOfFile (hFile=0x370) returned 1 [0113.637] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\7h1t7zwQ4ZuOZlBh.pdf" (normalized: "c:\\users\\keecfmwgj\\desktop\\7h1t7zwq4zuozlbh.pdf")) returned 1 [0113.640] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\7h1t7zwQ4ZuOZlBh.pdf" (normalized: "c:\\users\\keecfmwgj\\desktop\\7h1t7zwq4zuozlbh.pdf")) returned 0 [0113.640] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\7h1t7zwQ4ZuOZlBh.pdf" (normalized: "c:\\users\\keecfmwgj\\desktop\\7h1t7zwq4zuozlbh.pdf")) returned 0 [0113.641] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\7h1t7zwQ4ZuOZlBh.pdf" (normalized: "c:\\users\\keecfmwgj\\desktop\\7h1t7zwq4zuozlbh.pdf")) returned 0 [0113.645] SetEndOfFile (hFile=0x370) returned 1 [0113.693] SetEndOfFile (hFile=0x370) returned 1 [0113.701] SetEndOfFile (hFile=0x370) returned 1 [0113.708] SetEndOfFile (hFile=0x370) returned 1 [0113.714] SetEndOfFile (hFile=0x370) returned 1 [0113.772] SetEndOfFile (hFile=0x370) returned 1 [0113.809] SetEndOfFile (hFile=0x370) returned 1 [0113.815] SetEndOfFile (hFile=0x370) returned 1 [0113.837] SetEndOfFile (hFile=0x370) returned 1 [0113.846] SetEndOfFile (hFile=0x370) returned 1 [0113.875] SetEndOfFile (hFile=0x370) returned 1 [0113.886] SetEndOfFile (hFile=0x370) returned 1 [0113.894] SetEndOfFile (hFile=0x370) returned 1 [0113.899] SetEndOfFile (hFile=0x370) returned 1 [0113.908] SetEndOfFile (hFile=0x370) returned 1 [0113.921] SetEndOfFile (hFile=0x370) returned 1 [0113.930] SetEndOfFile (hFile=0x370) returned 1 [0113.939] SetEndOfFile (hFile=0x370) returned 1 [0113.983] SetEndOfFile (hFile=0x370) returned 1 [0113.994] SetEndOfFile (hFile=0x370) returned 1 [0114.003] SetEndOfFile (hFile=0x370) returned 1 [0114.012] SetEndOfFile (hFile=0x370) returned 1 [0114.018] SetEndOfFile (hFile=0x370) returned 1 [0114.029] SetEndOfFile (hFile=0x370) returned 1 [0114.037] SetEndOfFile (hFile=0x370) returned 1 [0114.046] SetEndOfFile (hFile=0x370) returned 1 [0114.059] SetEndOfFile (hFile=0x370) returned 1 [0114.075] SetEndOfFile (hFile=0x370) returned 1 [0114.082] SetEndOfFile (hFile=0x370) returned 1 [0114.090] SetEndOfFile (hFile=0x370) returned 1 [0114.096] SetEndOfFile (hFile=0x370) returned 1 [0114.101] SetEndOfFile (hFile=0x370) returned 1 [0114.115] SetEndOfFile (hFile=0x370) returned 1 [0114.123] SetEndOfFile (hFile=0x370) returned 1 [0114.131] SetEndOfFile (hFile=0x370) returned 1 [0114.138] SetEndOfFile (hFile=0x370) returned 1 [0114.152] SetEndOfFile (hFile=0x370) returned 1 [0114.176] SetEndOfFile (hFile=0x370) returned 1 [0114.184] SetEndOfFile (hFile=0x370) returned 1 [0114.192] SetEndOfFile (hFile=0x370) returned 1 [0114.198] SetEndOfFile (hFile=0x370) returned 1 [0114.207] SetEndOfFile (hFile=0x370) returned 1 [0114.216] SetEndOfFile (hFile=0x370) returned 1 [0114.225] SetEndOfFile (hFile=0x370) returned 1 [0114.240] SetEndOfFile (hFile=0x370) returned 1 [0114.258] SetEndOfFile (hFile=0x370) returned 1 [0114.267] SetEndOfFile (hFile=0x370) returned 1 [0114.277] SetEndOfFile (hFile=0x370) returned 1 [0114.284] SetEndOfFile (hFile=0x370) returned 1 [0114.309] SetEndOfFile (hFile=0x370) returned 1 [0114.317] SetEndOfFile (hFile=0x370) returned 1 [0114.328] SetEndOfFile (hFile=0x370) returned 1 [0114.338] SetEndOfFile (hFile=0x370) returned 1 [0114.347] SetEndOfFile (hFile=0x370) returned 1 [0114.354] SetEndOfFile (hFile=0x370) returned 1 [0114.361] SetEndOfFile (hFile=0x370) returned 1 [0114.369] SetEndOfFile (hFile=0x370) returned 1 [0114.375] SetEndOfFile (hFile=0x370) returned 1 [0114.381] SetEndOfFile (hFile=0x370) returned 1 [0114.390] SetEndOfFile (hFile=0x370) returned 1 [0114.397] SetEndOfFile (hFile=0x370) returned 1 [0114.404] SetEndOfFile (hFile=0x370) returned 1 [0114.411] SetEndOfFile (hFile=0x370) returned 1 [0114.424] SetEndOfFile (hFile=0x370) returned 1 [0114.436] SetEndOfFile (hFile=0x370) returned 1 [0114.443] SetEndOfFile (hFile=0x370) returned 1 [0114.450] SetEndOfFile (hFile=0x370) returned 1 [0114.454] SetEndOfFile (hFile=0x370) returned 1 [0114.472] SetEndOfFile (hFile=0x370) returned 1 [0114.481] SetEndOfFile (hFile=0x370) returned 1 [0114.488] SetEndOfFile (hFile=0x370) returned 1 [0114.499] SetEndOfFile (hFile=0x370) returned 1 [0114.514] SetEndOfFile (hFile=0x370) returned 1 [0114.523] SetEndOfFile (hFile=0x370) returned 1 [0114.535] SetEndOfFile (hFile=0x370) returned 1 [0114.542] SetEndOfFile (hFile=0x370) returned 1 [0114.548] SetEndOfFile (hFile=0x370) returned 1 [0114.574] SetEndOfFile (hFile=0x370) returned 1 [0114.584] SetEndOfFile (hFile=0x370) returned 1 [0114.594] SetEndOfFile (hFile=0x370) returned 1 [0114.603] SetEndOfFile (hFile=0x370) returned 1 [0114.614] SetEndOfFile (hFile=0x370) returned 1 [0114.646] SetEndOfFile (hFile=0x370) returned 1 [0114.658] SetEndOfFile (hFile=0x370) returned 1 [0114.666] SetEndOfFile (hFile=0x370) returned 1 [0114.671] SetEndOfFile (hFile=0x370) returned 1 [0114.683] SetEndOfFile (hFile=0x370) returned 1 [0114.692] SetEndOfFile (hFile=0x370) returned 1 [0114.701] SetEndOfFile (hFile=0x370) returned 1 [0114.710] SetEndOfFile (hFile=0x370) returned 1 [0114.726] SetEndOfFile (hFile=0x370) returned 1 [0114.803] SetEndOfFile (hFile=0x370) returned 1 [0114.814] SetEndOfFile (hFile=0x370) returned 1 [0115.029] SetEndOfFile (hFile=0x370) returned 1 [0115.034] SetEndOfFile (hFile=0x370) returned 1 [0115.043] SetEndOfFile (hFile=0x370) returned 1 [0115.052] SetEndOfFile (hFile=0x370) returned 1 [0115.060] SetEndOfFile (hFile=0x370) returned 1 [0115.167] SetEndOfFile (hFile=0x370) returned 1 [0115.184] SetEndOfFile (hFile=0x370) returned 1 [0115.193] SetEndOfFile (hFile=0x370) returned 1 [0115.219] SetEndOfFile (hFile=0x370) returned 1 [0115.227] SetEndOfFile (hFile=0x370) returned 1 [0115.232] SetEndOfFile (hFile=0x370) returned 1 [0115.241] SetEndOfFile (hFile=0x370) returned 1 [0115.249] SetEndOfFile (hFile=0x370) returned 1 [0115.259] SetEndOfFile (hFile=0x370) returned 1 [0115.267] SetEndOfFile (hFile=0x370) returned 1 [0115.278] SetEndOfFile (hFile=0x370) returned 1 [0115.287] SetEndOfFile (hFile=0x370) returned 1 [0115.297] SetEndOfFile (hFile=0x370) returned 1 [0115.306] SetEndOfFile (hFile=0x370) returned 1 [0115.312] SetEndOfFile (hFile=0x370) returned 1 [0115.321] SetEndOfFile (hFile=0x370) returned 1 [0115.331] SetEndOfFile (hFile=0x370) returned 1 [0115.398] SetEndOfFile (hFile=0x370) returned 1 [0115.407] SetEndOfFile (hFile=0x370) returned 1 [0115.529] SetEndOfFile (hFile=0x370) returned 1 [0115.537] SetEndOfFile (hFile=0x370) returned 1 [0115.544] SetEndOfFile (hFile=0x370) returned 1 [0115.550] SetEndOfFile (hFile=0x370) returned 1 [0115.556] SetEndOfFile (hFile=0x370) returned 1 [0115.564] SetEndOfFile (hFile=0x370) returned 1 [0115.595] SetEndOfFile (hFile=0x370) returned 1 [0115.613] SetEndOfFile (hFile=0x370) returned 1 [0115.619] SetEndOfFile (hFile=0x370) returned 1 [0115.641] SetEndOfFile (hFile=0x370) returned 1 [0115.650] SetEndOfFile (hFile=0x370) returned 1 [0115.657] SetEndOfFile (hFile=0x370) returned 1 [0115.665] SetEndOfFile (hFile=0x370) returned 1 [0115.671] SetEndOfFile (hFile=0x370) returned 1 [0115.685] SetEndOfFile (hFile=0x370) returned 1 [0115.691] SetEndOfFile (hFile=0x370) returned 1 [0115.698] SetEndOfFile (hFile=0x370) returned 1 [0115.705] SetEndOfFile (hFile=0x370) returned 1 [0115.720] SetEndOfFile (hFile=0x370) returned 1 [0115.730] SetEndOfFile (hFile=0x370) returned 1 [0115.737] SetEndOfFile (hFile=0x370) returned 1 [0115.744] SetEndOfFile (hFile=0x370) returned 1 [0115.748] SetEndOfFile (hFile=0x370) returned 1 [0115.755] SetEndOfFile (hFile=0x370) returned 1 [0115.763] SetEndOfFile (hFile=0x370) returned 1 [0115.770] SetEndOfFile (hFile=0x370) returned 1 [0115.806] SetEndOfFile (hFile=0x370) returned 1 [0115.820] SetEndOfFile (hFile=0x370) returned 1 [0115.826] SetEndOfFile (hFile=0x370) returned 1 [0115.833] SetEndOfFile (hFile=0x370) returned 1 [0115.840] SetEndOfFile (hFile=0x370) returned 1 [0115.844] SetEndOfFile (hFile=0x370) returned 1 [0115.852] SetEndOfFile (hFile=0x370) returned 1 [0115.862] SetEndOfFile (hFile=0x370) returned 1 [0115.868] SetEndOfFile (hFile=0x370) returned 1 [0115.881] SetEndOfFile (hFile=0x370) returned 1 [0115.893] SetEndOfFile (hFile=0x370) returned 1 [0115.901] SetEndOfFile (hFile=0x370) returned 1 [0115.909] SetEndOfFile (hFile=0x370) returned 1 [0115.916] SetEndOfFile (hFile=0x370) returned 1 [0115.921] SetEndOfFile (hFile=0x370) returned 1 [0115.932] SetEndOfFile (hFile=0x370) returned 1 [0115.939] SetEndOfFile (hFile=0x370) returned 1 [0115.948] SetEndOfFile (hFile=0x370) returned 1 [0115.955] SetEndOfFile (hFile=0x370) returned 1 [0115.964] SetEndOfFile (hFile=0x370) returned 1 [0115.971] SetEndOfFile (hFile=0x370) returned 1 [0115.981] SetEndOfFile (hFile=0x370) returned 1 [0115.986] SetEndOfFile (hFile=0x370) returned 1 [0115.990] SetEndOfFile (hFile=0x370) returned 1 [0115.996] SetEndOfFile (hFile=0x370) returned 1 [0116.002] SetEndOfFile (hFile=0x370) returned 1 [0116.009] SetEndOfFile (hFile=0x370) returned 1 [0116.016] SetEndOfFile (hFile=0x370) returned 1 [0116.073] SetEndOfFile (hFile=0x370) returned 1 [0116.080] SetEndOfFile (hFile=0x370) returned 1 [0116.087] SetEndOfFile (hFile=0x370) returned 1 [0116.092] SetEndOfFile (hFile=0x370) returned 1 [0116.096] SetEndOfFile (hFile=0x370) returned 1 [0116.107] SetEndOfFile (hFile=0x370) returned 1 [0116.113] SetEndOfFile (hFile=0x370) returned 1 [0116.132] SetEndOfFile (hFile=0x370) returned 1 [0116.140] SetEndOfFile (hFile=0x370) returned 1 [0116.153] SetEndOfFile (hFile=0x370) returned 1 [0116.160] SetEndOfFile (hFile=0x370) returned 1 [0116.168] SetEndOfFile (hFile=0x370) returned 1 [0116.173] SetEndOfFile (hFile=0x370) returned 1 [0116.179] SetEndOfFile (hFile=0x370) returned 1 [0116.186] SetEndOfFile (hFile=0x370) returned 1 [0116.192] SetEndOfFile (hFile=0x370) returned 1 [0116.199] SetEndOfFile (hFile=0x370) returned 1 [0116.206] SetEndOfFile (hFile=0x370) returned 1 [0116.220] SetEndOfFile (hFile=0x370) returned 1 [0116.226] SetEndOfFile (hFile=0x370) returned 1 [0116.234] SetEndOfFile (hFile=0x370) returned 1 [0116.240] SetEndOfFile (hFile=0x370) returned 1 [0116.245] SetEndOfFile (hFile=0x370) returned 1 [0116.252] SetEndOfFile (hFile=0x370) returned 1 [0116.260] SetEndOfFile (hFile=0x370) returned 1 [0116.266] SetEndOfFile (hFile=0x370) returned 1 [0116.274] SetEndOfFile (hFile=0x370) returned 1 [0116.283] SetEndOfFile (hFile=0x370) returned 1 [0116.290] SetEndOfFile (hFile=0x370) returned 1 [0116.297] SetEndOfFile (hFile=0x370) returned 1 [0116.303] SetEndOfFile (hFile=0x370) returned 1 [0116.308] SetEndOfFile (hFile=0x370) returned 1 [0116.320] SetEndOfFile (hFile=0x370) returned 1 [0116.328] SetEndOfFile (hFile=0x370) returned 1 [0116.335] SetEndOfFile (hFile=0x370) returned 1 [0116.352] SetEndOfFile (hFile=0x370) returned 1 [0116.367] SetEndOfFile (hFile=0x370) returned 1 [0116.374] SetEndOfFile (hFile=0x370) returned 1 [0116.382] SetEndOfFile (hFile=0x370) returned 1 [0116.388] SetEndOfFile (hFile=0x370) returned 1 [0116.392] SetEndOfFile (hFile=0x370) returned 1 [0116.403] SetEndOfFile (hFile=0x370) returned 1 [0116.411] SetEndOfFile (hFile=0x370) returned 1 [0116.419] SetEndOfFile (hFile=0x370) returned 1 [0116.427] SetEndOfFile (hFile=0x370) returned 1 [0116.493] SetEndOfFile (hFile=0x370) returned 1 [0116.512] SetEndOfFile (hFile=0x370) returned 1 [0116.530] SetEndOfFile (hFile=0x370) returned 1 [0116.547] SetEndOfFile (hFile=0x370) returned 1 [0116.565] SetEndOfFile (hFile=0x370) returned 1 [0116.581] SetEndOfFile (hFile=0x370) returned 1 [0116.680] SetEndOfFile (hFile=0x370) returned 1 [0116.697] SetEndOfFile (hFile=0x370) returned 1 [0116.717] SetEndOfFile (hFile=0x370) returned 1 [0116.743] SetEndOfFile (hFile=0x370) returned 1 [0116.796] SetEndOfFile (hFile=0x370) returned 1 [0116.830] SetEndOfFile (hFile=0x370) returned 1 [0116.855] SetEndOfFile (hFile=0x370) returned 1 [0116.877] SetEndOfFile (hFile=0x370) returned 1 [0116.894] SetEndOfFile (hFile=0x370) returned 1 [0116.913] SetEndOfFile (hFile=0x370) returned 1 [0116.930] SetEndOfFile (hFile=0x370) returned 1 [0116.950] SetEndOfFile (hFile=0x370) returned 1 [0116.965] SetEndOfFile (hFile=0x370) returned 1 [0116.981] SetEndOfFile (hFile=0x370) returned 1 [0117.001] SetEndOfFile (hFile=0x370) returned 1 [0117.031] SetEndOfFile (hFile=0x370) returned 1 [0117.049] SetEndOfFile (hFile=0x370) returned 1 [0117.065] SetEndOfFile (hFile=0x370) returned 1 [0117.081] SetEndOfFile (hFile=0x370) returned 1 [0117.096] SetEndOfFile (hFile=0x370) returned 1 [0117.111] SetEndOfFile (hFile=0x370) returned 1 [0117.127] SetEndOfFile (hFile=0x370) returned 1 [0117.142] SetEndOfFile (hFile=0x370) returned 1 [0117.159] SetEndOfFile (hFile=0x370) returned 1 [0117.183] SetEndOfFile (hFile=0x370) returned 1 [0117.509] SetEndOfFile (hFile=0x370) returned 1 [0117.518] SetEndOfFile (hFile=0x370) returned 1 [0117.532] SetEndOfFile (hFile=0x370) returned 1 [0117.537] SetEndOfFile (hFile=0x370) returned 1 [0117.543] SetEndOfFile (hFile=0x370) returned 1 [0117.549] SetEndOfFile (hFile=0x370) returned 1 [0117.555] SetEndOfFile (hFile=0x370) returned 1 [0117.565] SetEndOfFile (hFile=0x370) returned 1 [0117.575] SetEndOfFile (hFile=0x370) returned 1 [0117.609] SetEndOfFile (hFile=0x370) returned 1 [0117.618] SetEndOfFile (hFile=0x370) returned 1 [0117.623] SetEndOfFile (hFile=0x370) returned 1 [0117.627] SetEndOfFile (hFile=0x370) returned 1 [0117.637] SetEndOfFile (hFile=0x370) returned 1 [0117.643] SetEndOfFile (hFile=0x370) returned 1 [0117.653] SetEndOfFile (hFile=0x370) returned 1 [0117.663] SetEndOfFile (hFile=0x370) returned 1 [0117.681] SetEndOfFile (hFile=0x370) returned 1 [0117.692] SetEndOfFile (hFile=0x370) returned 1 [0117.699] SetEndOfFile (hFile=0x370) returned 1 [0117.713] SetEndOfFile (hFile=0x370) returned 1 [0117.716] SetEndOfFile (hFile=0x370) returned 1 [0117.723] SetEndOfFile (hFile=0x370) returned 1 [0117.729] SetEndOfFile (hFile=0x370) returned 1 [0117.734] SetEndOfFile (hFile=0x370) returned 1 [0117.742] SetEndOfFile (hFile=0x370) returned 1 [0117.753] SetEndOfFile (hFile=0x370) returned 1 [0117.759] SetEndOfFile (hFile=0x370) returned 1 [0117.765] SetEndOfFile (hFile=0x370) returned 1 [0117.770] SetEndOfFile (hFile=0x370) returned 1 [0117.789] SetEndOfFile (hFile=0x370) returned 1 [0117.795] SetEndOfFile (hFile=0x370) returned 1 [0117.801] SetEndOfFile (hFile=0x370) returned 1 [0117.816] SetEndOfFile (hFile=0x370) returned 1 [0117.823] SetEndOfFile (hFile=0x370) returned 1 [0117.840] SetEndOfFile (hFile=0x370) returned 1 [0117.846] SetEndOfFile (hFile=0x370) returned 1 [0117.865] SetEndOfFile (hFile=0x370) returned 1 [0117.870] SetEndOfFile (hFile=0x370) returned 1 [0117.874] SetEndOfFile (hFile=0x370) returned 1 [0117.880] SetEndOfFile (hFile=0x370) returned 1 [0117.886] SetEndOfFile (hFile=0x370) returned 1 [0117.892] SetEndOfFile (hFile=0x370) returned 1 [0117.900] SetEndOfFile (hFile=0x370) returned 1 [0117.904] SetEndOfFile (hFile=0x370) returned 1 [0117.908] SetEndOfFile (hFile=0x370) returned 1 [0117.941] SetEndOfFile (hFile=0x370) returned 1 [0117.949] SetEndOfFile (hFile=0x370) returned 1 [0117.962] SetEndOfFile (hFile=0x370) returned 1 [0118.012] SetEndOfFile (hFile=0x370) returned 1 [0118.017] SetEndOfFile (hFile=0x370) returned 1 [0118.114] SetEndOfFile (hFile=0x370) returned 1 [0118.291] SetEndOfFile (hFile=0x370) returned 1 [0118.551] SetEndOfFile (hFile=0x370) returned 1 [0118.554] SetEndOfFile (hFile=0x370) returned 1 [0118.573] SetEndOfFile (hFile=0x370) returned 1 [0118.577] SetEndOfFile (hFile=0x370) returned 1 [0118.713] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x2fd8ac, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\My Pictures", lpFilePart=0x0) returned 0x28 [0118.725] SetEndOfFile (hFile=0x370) returned 1 [0118.733] SetEndOfFile (hFile=0x370) returned 1 [0118.771] SetEndOfFile (hFile=0x370) returned 1 [0118.777] SetEndOfFile (hFile=0x370) returned 1 [0118.830] SetEndOfFile (hFile=0x370) returned 1 [0118.835] SetEndOfFile (hFile=0x370) returned 1 [0118.861] SetEndOfFile (hFile=0x370) returned 1 [0118.867] SetEndOfFile (hFile=0x370) returned 1 [0118.896] SetEndOfFile (hFile=0x370) returned 1 [0118.902] SetEndOfFile (hFile=0x370) returned 1 [0118.927] SetEndOfFile (hFile=0x370) returned 1 [0118.933] SetEndOfFile (hFile=0x370) returned 1 [0118.959] SetEndOfFile (hFile=0x370) returned 1 [0118.964] SetEndOfFile (hFile=0x370) returned 1 [0118.977] SetEndOfFile (hFile=0x370) returned 1 [0118.983] SetEndOfFile (hFile=0x370) returned 1 [0119.005] SetEndOfFile (hFile=0x370) returned 1 [0119.010] SetEndOfFile (hFile=0x370) returned 1 [0119.039] SetEndOfFile (hFile=0x370) returned 1 [0119.054] SetEndOfFile (hFile=0x370) returned 1 [0119.073] SetEndOfFile (hFile=0x370) returned 1 [0119.078] SetEndOfFile (hFile=0x370) returned 1 [0119.099] SetEndOfFile (hFile=0x370) returned 1 [0119.105] SetEndOfFile (hFile=0x370) returned 1 [0119.133] SetEndOfFile (hFile=0x370) returned 1 [0119.138] SetEndOfFile (hFile=0x370) returned 1 [0119.167] SetEndOfFile (hFile=0x370) returned 1 [0119.171] SetEndOfFile (hFile=0x370) returned 1 [0119.196] SetEndOfFile (hFile=0x370) returned 1 [0119.201] SetEndOfFile (hFile=0x370) returned 1 [0119.222] SetEndOfFile (hFile=0x370) returned 1 [0119.228] SetEndOfFile (hFile=0x370) returned 1 [0119.249] SetEndOfFile (hFile=0x370) returned 1 [0119.256] SetEndOfFile (hFile=0x370) returned 1 [0119.277] SetEndOfFile (hFile=0x370) returned 1 [0119.283] SetEndOfFile (hFile=0x370) returned 1 [0119.307] SetEndOfFile (hFile=0x370) returned 1 [0119.312] SetEndOfFile (hFile=0x370) returned 1 [0119.335] SetEndOfFile (hFile=0x370) returned 1 [0119.339] SetEndOfFile (hFile=0x370) returned 1 [0119.358] SetEndOfFile (hFile=0x370) returned 1 [0119.363] SetEndOfFile (hFile=0x370) returned 1 [0119.413] SetEndOfFile (hFile=0x370) returned 1 [0119.417] SetEndOfFile (hFile=0x370) returned 1 [0119.436] SetEndOfFile (hFile=0x370) returned 1 [0119.476] SetEndOfFile (hFile=0x370) returned 1 [0119.499] SetEndOfFile (hFile=0x370) returned 1 [0119.504] SetEndOfFile (hFile=0x370) returned 1 [0119.525] SetEndOfFile (hFile=0x370) returned 1 [0119.530] SetEndOfFile (hFile=0x370) returned 1 [0119.573] SetEndOfFile (hFile=0x370) returned 1 [0119.590] SetEndOfFile (hFile=0x370) returned 1 [0119.634] SetEndOfFile (hFile=0x370) returned 1 [0119.639] SetEndOfFile (hFile=0x370) returned 1 [0119.660] SetEndOfFile (hFile=0x370) returned 1 [0119.666] SetEndOfFile (hFile=0x370) returned 1 [0119.707] SetEndOfFile (hFile=0x370) returned 1 [0119.713] SetEndOfFile (hFile=0x370) returned 1 [0119.738] SetEndOfFile (hFile=0x370) returned 1 [0119.744] SetEndOfFile (hFile=0x370) returned 1 [0119.767] SetEndOfFile (hFile=0x370) returned 1 [0119.773] SetEndOfFile (hFile=0x370) returned 1 [0119.815] SetEndOfFile (hFile=0x370) returned 1 [0119.821] SetEndOfFile (hFile=0x370) returned 1 [0119.840] SetEndOfFile (hFile=0x370) returned 1 [0119.849] SetEndOfFile (hFile=0x370) returned 1 [0119.866] SetEndOfFile (hFile=0x370) returned 1 [0119.870] SetEndOfFile (hFile=0x370) returned 1 [0119.888] SetEndOfFile (hFile=0x370) returned 1 [0119.898] SetEndOfFile (hFile=0x370) returned 1 [0119.932] SetEndOfFile (hFile=0x370) returned 1 [0119.951] SetEndOfFile (hFile=0x370) returned 1 [0119.979] SetEndOfFile (hFile=0x370) returned 1 [0119.988] SetEndOfFile (hFile=0x370) returned 1 [0120.009] SetEndOfFile (hFile=0x370) returned 1 [0120.016] SetEndOfFile (hFile=0x370) returned 1 [0120.037] SetEndOfFile (hFile=0x370) returned 1 [0120.042] SetEndOfFile (hFile=0x370) returned 1 [0120.062] SetEndOfFile (hFile=0x370) returned 1 [0120.067] SetEndOfFile (hFile=0x370) returned 1 [0120.070] SetEndOfFile (hFile=0x370) returned 1 [0120.080] SetEndOfFile (hFile=0x370) returned 1 [0120.089] SetEndOfFile (hFile=0x370) returned 1 [0120.096] SetEndOfFile (hFile=0x370) returned 1 [0120.104] SetEndOfFile (hFile=0x370) returned 1 [0120.112] SetEndOfFile (hFile=0x370) returned 1 [0120.147] SetEndOfFile (hFile=0x370) returned 1 [0120.250] SetEndOfFile (hFile=0x370) returned 1 [0120.254] SetEndOfFile (hFile=0x370) returned 1 [0120.260] SetEndOfFile (hFile=0x370) returned 1 [0120.271] SetEndOfFile (hFile=0x370) returned 1 [0120.279] SetEndOfFile (hFile=0x370) returned 1 [0120.288] SetEndOfFile (hFile=0x370) returned 1 [0120.292] SetEndOfFile (hFile=0x370) returned 1 [0120.300] SetEndOfFile (hFile=0x370) returned 1 [0120.309] SetEndOfFile (hFile=0x370) returned 1 [0120.315] SetEndOfFile (hFile=0x370) returned 1 [0120.319] SetEndOfFile (hFile=0x370) returned 1 [0120.324] SetEndOfFile (hFile=0x370) returned 1 [0120.335] SetEndOfFile (hFile=0x370) returned 1 [0120.339] SetEndOfFile (hFile=0x370) returned 1 [0120.346] SetEndOfFile (hFile=0x370) returned 1 [0120.355] SetEndOfFile (hFile=0x370) returned 1 [0120.360] SetEndOfFile (hFile=0x370) returned 1 [0120.364] SetEndOfFile (hFile=0x370) returned 1 [0120.367] SetEndOfFile (hFile=0x370) returned 1 [0120.371] SetEndOfFile (hFile=0x370) returned 1 [0120.377] SetEndOfFile (hFile=0x370) returned 1 [0120.383] SetEndOfFile (hFile=0x370) returned 1 [0120.388] SetEndOfFile (hFile=0x370) returned 1 [0120.400] SetEndOfFile (hFile=0x370) returned 1 [0120.406] SetEndOfFile (hFile=0x370) returned 1 [0120.411] SetEndOfFile (hFile=0x370) returned 1 [0120.415] SetEndOfFile (hFile=0x370) returned 1 [0120.421] SetEndOfFile (hFile=0x370) returned 1 [0120.429] SetEndOfFile (hFile=0x370) returned 1 [0120.433] SetEndOfFile (hFile=0x370) returned 1 [0120.437] SetEndOfFile (hFile=0x370) returned 1 [0120.441] SetEndOfFile (hFile=0x370) returned 1 [0120.446] SetEndOfFile (hFile=0x370) returned 1 [0120.451] SetEndOfFile (hFile=0x370) returned 1 [0120.456] SetEndOfFile (hFile=0x370) returned 1 [0120.466] SetEndOfFile (hFile=0x370) returned 1 [0120.478] SetEndOfFile (hFile=0x370) returned 1 [0120.483] SetEndOfFile (hFile=0x370) returned 1 [0120.488] SetEndOfFile (hFile=0x370) returned 1 [0120.492] SetEndOfFile (hFile=0x370) returned 1 [0120.497] SetEndOfFile (hFile=0x370) returned 1 [0120.502] SetEndOfFile (hFile=0x370) returned 1 [0120.506] SetEndOfFile (hFile=0x370) returned 1 [0120.510] SetEndOfFile (hFile=0x370) returned 1 [0120.513] SetEndOfFile (hFile=0x370) returned 1 [0120.519] SetEndOfFile (hFile=0x370) returned 1 [0120.524] SetEndOfFile (hFile=0x370) returned 1 [0120.528] SetEndOfFile (hFile=0x370) returned 1 [0120.533] SetEndOfFile (hFile=0x370) returned 1 [0120.538] SetEndOfFile (hFile=0x370) returned 1 [0120.543] SetEndOfFile (hFile=0x370) returned 1 [0120.550] SetEndOfFile (hFile=0x370) returned 1 [0120.556] SetEndOfFile (hFile=0x370) returned 1 [0120.569] SetEndOfFile (hFile=0x370) returned 1 [0120.577] SetEndOfFile (hFile=0x370) returned 1 [0120.582] SetEndOfFile (hFile=0x370) returned 1 [0120.587] SetEndOfFile (hFile=0x370) returned 1 [0120.591] SetEndOfFile (hFile=0x370) returned 1 [0120.608] SetEndOfFile (hFile=0x370) returned 1 [0120.614] SetEndOfFile (hFile=0x370) returned 1 [0120.618] SetEndOfFile (hFile=0x370) returned 1 [0120.621] SetEndOfFile (hFile=0x370) returned 1 [0120.641] SetEndOfFile (hFile=0x370) returned 1 [0120.649] SetEndOfFile (hFile=0x370) returned 1 [0120.655] SetEndOfFile (hFile=0x370) returned 1 [0120.661] SetEndOfFile (hFile=0x370) returned 1 [0120.668] SetEndOfFile (hFile=0x370) returned 1 [0120.679] SetEndOfFile (hFile=0x370) returned 1 [0120.686] SetEndOfFile (hFile=0x370) returned 1 [0120.693] SetEndOfFile (hFile=0x370) returned 1 [0120.702] SetEndOfFile (hFile=0x370) returned 1 [0120.706] SetEndOfFile (hFile=0x370) returned 1 [0120.713] SetEndOfFile (hFile=0x370) returned 1 [0120.720] SetEndOfFile (hFile=0x370) returned 1 [0120.727] SetEndOfFile (hFile=0x370) returned 1 [0120.734] SetEndOfFile (hFile=0x370) returned 1 [0120.740] SetEndOfFile (hFile=0x370) returned 1 [0120.747] SetEndOfFile (hFile=0x370) returned 1 [0120.755] SetEndOfFile (hFile=0x370) returned 1 [0120.764] SetEndOfFile (hFile=0x370) returned 1 [0120.772] SetEndOfFile (hFile=0x370) returned 1 [0120.779] SetEndOfFile (hFile=0x370) returned 1 [0120.786] SetEndOfFile (hFile=0x370) returned 1 [0120.793] SetEndOfFile (hFile=0x370) returned 1 [0120.801] SetEndOfFile (hFile=0x370) returned 1 [0120.808] SetEndOfFile (hFile=0x370) returned 1 [0120.831] SetEndOfFile (hFile=0x370) returned 1 [0120.837] SetEndOfFile (hFile=0x370) returned 1 [0120.845] SetEndOfFile (hFile=0x370) returned 1 [0120.853] SetEndOfFile (hFile=0x370) returned 1 [0120.860] SetEndOfFile (hFile=0x370) returned 1 [0120.867] SetEndOfFile (hFile=0x370) returned 1 [0120.877] SetEndOfFile (hFile=0x370) returned 1 [0120.884] SetEndOfFile (hFile=0x370) returned 1 [0120.915] SetEndOfFile (hFile=0x370) returned 1 [0120.920] SetEndOfFile (hFile=0x370) returned 1 [0120.923] SetEndOfFile (hFile=0x370) returned 1 [0120.928] SetEndOfFile (hFile=0x370) returned 1 [0120.933] SetEndOfFile (hFile=0x370) returned 1 [0120.941] SetEndOfFile (hFile=0x370) returned 1 [0120.946] SetEndOfFile (hFile=0x370) returned 1 [0120.952] SetEndOfFile (hFile=0x370) returned 1 [0120.956] SetEndOfFile (hFile=0x370) returned 1 [0120.962] SetEndOfFile (hFile=0x370) returned 1 [0120.967] SetEndOfFile (hFile=0x370) returned 1 [0120.976] SetEndOfFile (hFile=0x370) returned 1 [0120.981] SetEndOfFile (hFile=0x370) returned 1 [0120.987] SetEndOfFile (hFile=0x370) returned 1 [0120.992] SetEndOfFile (hFile=0x370) returned 1 [0120.997] SetEndOfFile (hFile=0x370) returned 1 [0121.002] SetEndOfFile (hFile=0x370) returned 1 [0121.006] SetEndOfFile (hFile=0x370) returned 1 [0121.009] SetEndOfFile (hFile=0x370) returned 1 [0121.015] SetEndOfFile (hFile=0x370) returned 1 [0121.021] SetEndOfFile (hFile=0x370) returned 1 [0121.025] SetEndOfFile (hFile=0x370) returned 1 [0121.030] SetEndOfFile (hFile=0x370) returned 1 [0121.068] SetEndOfFile (hFile=0x370) returned 1 [0121.074] SetEndOfFile (hFile=0x370) returned 1 [0121.081] SetEndOfFile (hFile=0x370) returned 1 [0121.089] SetEndOfFile (hFile=0x370) returned 1 [0121.101] SetEndOfFile (hFile=0x370) returned 1 [0121.106] SetEndOfFile (hFile=0x370) returned 1 [0121.111] SetEndOfFile (hFile=0x370) returned 1 [0121.116] SetEndOfFile (hFile=0x370) returned 1 [0121.121] SetEndOfFile (hFile=0x370) returned 1 [0121.131] SetEndOfFile (hFile=0x370) returned 1 [0121.135] SetEndOfFile (hFile=0x370) returned 1 [0121.140] SetEndOfFile (hFile=0x370) returned 1 [0121.145] SetEndOfFile (hFile=0x370) returned 1 [0121.153] SetEndOfFile (hFile=0x370) returned 1 [0121.158] SetEndOfFile (hFile=0x370) returned 1 [0121.162] SetEndOfFile (hFile=0x370) returned 1 [0121.167] SetEndOfFile (hFile=0x370) returned 1 [0121.172] SetEndOfFile (hFile=0x370) returned 1 [0121.177] SetEndOfFile (hFile=0x370) returned 1 [0121.182] SetEndOfFile (hFile=0x370) returned 1 [0121.188] SetEndOfFile (hFile=0x370) returned 1 [0121.191] SetEndOfFile (hFile=0x370) returned 1 [0121.196] SetEndOfFile (hFile=0x370) returned 1 [0121.202] SetEndOfFile (hFile=0x370) returned 1 [0121.207] SetEndOfFile (hFile=0x370) returned 1 [0121.212] SetEndOfFile (hFile=0x370) returned 1 [0121.217] SetEndOfFile (hFile=0x370) returned 1 [0121.221] SetEndOfFile (hFile=0x370) returned 1 [0121.224] SetEndOfFile (hFile=0x370) returned 1 [0121.229] SetEndOfFile (hFile=0x370) returned 1 [0121.237] SetEndOfFile (hFile=0x370) returned 1 [0121.242] SetEndOfFile (hFile=0x370) returned 1 [0121.247] SetEndOfFile (hFile=0x370) returned 1 [0121.252] SetEndOfFile (hFile=0x370) returned 1 [0121.256] SetEndOfFile (hFile=0x370) returned 1 [0121.261] SetEndOfFile (hFile=0x370) returned 1 [0121.267] SetEndOfFile (hFile=0x370) returned 1 [0121.273] SetEndOfFile (hFile=0x370) returned 1 [0121.281] SetEndOfFile (hFile=0x370) returned 1 [0121.287] SetEndOfFile (hFile=0x370) returned 1 [0121.293] SetEndOfFile (hFile=0x370) returned 1 [0121.300] SetEndOfFile (hFile=0x370) returned 1 [0121.307] SetEndOfFile (hFile=0x370) returned 1 [0121.312] SetEndOfFile (hFile=0x370) returned 1 [0121.317] SetEndOfFile (hFile=0x370) returned 1 [0121.323] SetEndOfFile (hFile=0x370) returned 1 [0121.332] SetEndOfFile (hFile=0x370) returned 1 [0121.336] SetEndOfFile (hFile=0x370) returned 1 [0121.342] SetEndOfFile (hFile=0x370) returned 1 [0121.350] SetEndOfFile (hFile=0x370) returned 1 [0121.356] SetEndOfFile (hFile=0x370) returned 1 [0121.365] SetEndOfFile (hFile=0x370) returned 1 [0121.376] SetEndOfFile (hFile=0x370) returned 1 [0121.382] SetEndOfFile (hFile=0x370) returned 1 [0121.391] SetEndOfFile (hFile=0x370) returned 1 [0121.398] SetEndOfFile (hFile=0x370) returned 1 [0121.407] SetEndOfFile (hFile=0x370) returned 1 [0121.413] SetEndOfFile (hFile=0x370) returned 1 [0121.545] SetEndOfFile (hFile=0x370) returned 1 [0121.551] SetEndOfFile (hFile=0x370) returned 1 [0121.558] SetEndOfFile (hFile=0x370) returned 1 [0121.566] SetEndOfFile (hFile=0x370) returned 1 [0121.571] SetEndOfFile (hFile=0x370) returned 1 [0121.576] SetEndOfFile (hFile=0x370) returned 1 [0121.586] SetEndOfFile (hFile=0x370) returned 1 [0121.619] SetEndOfFile (hFile=0x370) returned 1 [0121.627] SetEndOfFile (hFile=0x370) returned 1 [0121.633] SetEndOfFile (hFile=0x370) returned 1 [0121.641] SetEndOfFile (hFile=0x370) returned 1 [0121.646] SetEndOfFile (hFile=0x370) returned 1 [0121.657] SetEndOfFile (hFile=0x370) returned 1 [0121.664] SetEndOfFile (hFile=0x370) returned 1 [0121.672] SetEndOfFile (hFile=0x370) returned 1 [0121.679] SetEndOfFile (hFile=0x370) returned 1 [0121.687] SetEndOfFile (hFile=0x370) returned 1 [0121.693] SetEndOfFile (hFile=0x370) returned 1 [0121.702] SetEndOfFile (hFile=0x370) returned 1 [0121.709] SetEndOfFile (hFile=0x370) returned 1 [0121.715] SetEndOfFile (hFile=0x370) returned 1 [0121.719] SetEndOfFile (hFile=0x370) returned 1 [0121.726] SetEndOfFile (hFile=0x370) returned 1 [0121.733] SetEndOfFile (hFile=0x370) returned 1 [0121.739] SetEndOfFile (hFile=0x370) returned 1 [0121.745] SetEndOfFile (hFile=0x370) returned 1 [0121.756] SetEndOfFile (hFile=0x370) returned 1 [0121.762] SetEndOfFile (hFile=0x370) returned 1 [0121.769] SetEndOfFile (hFile=0x370) returned 1 [0121.776] SetEndOfFile (hFile=0x370) returned 1 [0121.783] SetEndOfFile (hFile=0x370) returned 1 [0121.802] SetEndOfFile (hFile=0x370) returned 1 [0121.822] SetEndOfFile (hFile=0x370) returned 1 [0121.828] SetEndOfFile (hFile=0x370) returned 1 [0121.835] SetEndOfFile (hFile=0x370) returned 1 [0121.841] SetEndOfFile (hFile=0x370) returned 1 [0121.847] SetEndOfFile (hFile=0x370) returned 1 [0121.851] SetEndOfFile (hFile=0x370) returned 1 [0121.866] SetEndOfFile (hFile=0x370) returned 1 [0121.875] SetEndOfFile (hFile=0x370) returned 1 [0121.882] SetEndOfFile (hFile=0x370) returned 1 [0121.890] SetEndOfFile (hFile=0x370) returned 1 [0121.899] SetEndOfFile (hFile=0x370) returned 1 [0121.909] SetEndOfFile (hFile=0x370) returned 1 [0121.916] SetEndOfFile (hFile=0x370) returned 1 [0121.923] SetEndOfFile (hFile=0x370) returned 1 [0121.929] SetEndOfFile (hFile=0x370) returned 1 [0121.934] SetEndOfFile (hFile=0x370) returned 1 [0121.941] SetEndOfFile (hFile=0x370) returned 1 [0121.947] SetEndOfFile (hFile=0x370) returned 1 [0121.956] SetEndOfFile (hFile=0x370) returned 1 [0121.962] SetEndOfFile (hFile=0x370) returned 1 [0121.969] SetEndOfFile (hFile=0x370) returned 1 [0121.974] SetEndOfFile (hFile=0x370) returned 1 [0121.978] SetEndOfFile (hFile=0x370) returned 1 [0121.985] SetEndOfFile (hFile=0x370) returned 1 [0121.991] SetEndOfFile (hFile=0x370) returned 1 [0122.002] SetEndOfFile (hFile=0x370) returned 1 [0122.008] SetEndOfFile (hFile=0x370) returned 1 [0122.016] SetEndOfFile (hFile=0x370) returned 1 [0122.022] SetEndOfFile (hFile=0x370) returned 1 [0122.029] SetEndOfFile (hFile=0x370) returned 1 [0122.035] SetEndOfFile (hFile=0x370) returned 1 [0122.042] SetEndOfFile (hFile=0x370) returned 1 [0122.051] SetEndOfFile (hFile=0x370) returned 1 [0122.058] SetEndOfFile (hFile=0x370) returned 1 [0122.065] SetEndOfFile (hFile=0x370) returned 1 [0122.072] SetEndOfFile (hFile=0x370) returned 1 [0122.084] SetEndOfFile (hFile=0x370) returned 1 [0122.090] SetEndOfFile (hFile=0x370) returned 1 [0122.094] SetEndOfFile (hFile=0x370) returned 1 [0122.101] SetEndOfFile (hFile=0x370) returned 1 [0122.108] SetEndOfFile (hFile=0x370) returned 1 [0122.114] SetEndOfFile (hFile=0x370) returned 1 [0122.122] SetEndOfFile (hFile=0x370) returned 1 [0122.128] SetEndOfFile (hFile=0x370) returned 1 [0122.134] SetEndOfFile (hFile=0x370) returned 1 [0122.141] SetEndOfFile (hFile=0x370) returned 1 [0122.150] SetEndOfFile (hFile=0x370) returned 1 [0122.158] SetEndOfFile (hFile=0x370) returned 1 [0122.164] SetEndOfFile (hFile=0x370) returned 1 [0122.171] SetEndOfFile (hFile=0x370) returned 1 [0122.181] SetEndOfFile (hFile=0x370) returned 1 [0122.193] SetEndOfFile (hFile=0x370) returned 1 [0122.200] SetEndOfFile (hFile=0x370) returned 1 [0122.206] SetEndOfFile (hFile=0x370) returned 1 [0122.212] SetEndOfFile (hFile=0x370) returned 1 [0122.219] SetEndOfFile (hFile=0x370) returned 1 [0122.224] SetEndOfFile (hFile=0x370) returned 1 [0122.229] SetEndOfFile (hFile=0x370) returned 1 [0122.237] SetEndOfFile (hFile=0x370) returned 1 [0122.243] SetEndOfFile (hFile=0x370) returned 1 [0122.249] SetEndOfFile (hFile=0x370) returned 1 [0122.256] SetEndOfFile (hFile=0x370) returned 1 [0122.265] SetEndOfFile (hFile=0x370) returned 1 [0122.271] SetEndOfFile (hFile=0x370) returned 1 [0122.278] SetEndOfFile (hFile=0x370) returned 1 [0122.284] SetEndOfFile (hFile=0x370) returned 1 [0122.292] SetEndOfFile (hFile=0x370) returned 1 [0122.299] SetEndOfFile (hFile=0x370) returned 1 [0122.305] SetEndOfFile (hFile=0x370) returned 1 [0122.311] SetEndOfFile (hFile=0x370) returned 1 [0122.318] SetEndOfFile (hFile=0x370) returned 1 [0122.372] SetEndOfFile (hFile=0x370) returned 1 [0122.377] SetEndOfFile (hFile=0x370) returned 1 [0122.382] SetEndOfFile (hFile=0x370) returned 1 [0122.389] SetEndOfFile (hFile=0x370) returned 1 [0122.396] SetEndOfFile (hFile=0x370) returned 1 [0122.431] SetEndOfFile (hFile=0x370) returned 1 [0122.438] SetEndOfFile (hFile=0x370) returned 1 [0122.445] SetEndOfFile (hFile=0x370) returned 1 [0122.451] SetEndOfFile (hFile=0x370) returned 1 [0122.458] SetEndOfFile (hFile=0x370) returned 1 [0122.467] SetEndOfFile (hFile=0x370) returned 1 [0122.475] SetEndOfFile (hFile=0x370) returned 1 [0122.482] SetEndOfFile (hFile=0x370) returned 1 [0122.489] SetEndOfFile (hFile=0x370) returned 1 [0122.496] SetEndOfFile (hFile=0x370) returned 1 [0122.511] SetEndOfFile (hFile=0x370) returned 1 [0122.520] SetEndOfFile (hFile=0x370) returned 1 [0122.525] SetEndOfFile (hFile=0x370) returned 1 [0122.530] SetEndOfFile (hFile=0x370) returned 1 [0122.537] SetEndOfFile (hFile=0x370) returned 1 [0122.544] SetEndOfFile (hFile=0x370) returned 1 [0122.550] SetEndOfFile (hFile=0x370) returned 1 [0122.557] SetEndOfFile (hFile=0x370) returned 1 [0122.564] SetEndOfFile (hFile=0x370) returned 1 [0122.571] SetEndOfFile (hFile=0x370) returned 1 [0122.578] SetEndOfFile (hFile=0x370) returned 1 [0122.585] SetEndOfFile (hFile=0x370) returned 1 [0122.593] SetEndOfFile (hFile=0x370) returned 1 [0122.599] SetEndOfFile (hFile=0x370) returned 1 [0122.622] SetEndOfFile (hFile=0x370) returned 1 [0122.632] SetEndOfFile (hFile=0x370) returned 1 [0122.639] SetEndOfFile (hFile=0x370) returned 1 [0122.647] SetEndOfFile (hFile=0x370) returned 1 [0122.653] SetEndOfFile (hFile=0x370) returned 1 [0122.658] SetEndOfFile (hFile=0x370) returned 1 [0122.664] SetEndOfFile (hFile=0x370) returned 1 [0122.671] SetEndOfFile (hFile=0x370) returned 1 [0122.678] SetEndOfFile (hFile=0x370) returned 1 [0122.685] SetEndOfFile (hFile=0x370) returned 1 [0122.692] SetEndOfFile (hFile=0x370) returned 1 [0122.698] SetEndOfFile (hFile=0x370) returned 1 [0122.705] SetEndOfFile (hFile=0x370) returned 1 [0122.714] SetEndOfFile (hFile=0x370) returned 1 [0122.721] SetEndOfFile (hFile=0x370) returned 1 [0122.726] SetEndOfFile (hFile=0x370) returned 1 [0122.733] SetEndOfFile (hFile=0x370) returned 1 [0122.740] SetEndOfFile (hFile=0x370) returned 1 [0122.747] SetEndOfFile (hFile=0x370) returned 1 [0122.754] SetEndOfFile (hFile=0x370) returned 1 [0122.761] SetEndOfFile (hFile=0x370) returned 1 [0122.766] SetEndOfFile (hFile=0x370) returned 1 [0122.771] SetEndOfFile (hFile=0x370) returned 1 [0122.778] SetEndOfFile (hFile=0x370) returned 1 [0122.785] SetEndOfFile (hFile=0x370) returned 1 [0122.791] SetEndOfFile (hFile=0x370) returned 1 [0122.799] SetEndOfFile (hFile=0x370) returned 1 [0122.812] SetEndOfFile (hFile=0x370) returned 1 [0122.818] SetEndOfFile (hFile=0x370) returned 1 [0122.837] SetEndOfFile (hFile=0x370) returned 1 [0122.844] SetEndOfFile (hFile=0x370) returned 1 [0122.852] SetEndOfFile (hFile=0x370) returned 1 [0122.859] SetEndOfFile (hFile=0x370) returned 1 [0122.866] SetEndOfFile (hFile=0x370) returned 1 [0122.874] SetEndOfFile (hFile=0x370) returned 1 [0122.881] SetEndOfFile (hFile=0x370) returned 1 [0122.888] SetEndOfFile (hFile=0x370) returned 1 [0122.893] SetEndOfFile (hFile=0x370) returned 1 [0122.898] SetEndOfFile (hFile=0x370) returned 1 [0122.907] SetEndOfFile (hFile=0x370) returned 1 [0122.914] SetEndOfFile (hFile=0x370) returned 1 [0122.920] SetEndOfFile (hFile=0x370) returned 1 [0122.927] SetEndOfFile (hFile=0x370) returned 1 [0122.934] SetEndOfFile (hFile=0x370) returned 1 [0122.940] SetEndOfFile (hFile=0x370) returned 1 [0122.947] SetEndOfFile (hFile=0x370) returned 1 [0122.954] SetEndOfFile (hFile=0x370) returned 1 [0122.964] SetEndOfFile (hFile=0x370) returned 1 [0122.968] SetEndOfFile (hFile=0x370) returned 1 [0122.976] SetEndOfFile (hFile=0x370) returned 1 [0122.983] SetEndOfFile (hFile=0x370) returned 1 [0122.998] SetEndOfFile (hFile=0x370) returned 1 [0123.009] SetEndOfFile (hFile=0x370) returned 1 [0123.015] SetEndOfFile (hFile=0x370) returned 1 [0123.023] SetEndOfFile (hFile=0x370) returned 1 [0123.030] SetEndOfFile (hFile=0x370) returned 1 [0123.035] SetEndOfFile (hFile=0x370) returned 1 [0123.040] SetEndOfFile (hFile=0x370) returned 1 [0123.078] SetEndOfFile (hFile=0x370) returned 1 [0123.085] SetEndOfFile (hFile=0x370) returned 1 [0123.091] SetEndOfFile (hFile=0x370) returned 1 [0123.100] SetEndOfFile (hFile=0x370) returned 1 [0123.109] SetEndOfFile (hFile=0x370) returned 1 [0123.115] SetEndOfFile (hFile=0x370) returned 1 [0123.122] SetEndOfFile (hFile=0x370) returned 1 [0123.131] SetEndOfFile (hFile=0x370) returned 1 [0123.139] SetEndOfFile (hFile=0x370) returned 1 [0123.146] SetEndOfFile (hFile=0x370) returned 1 [0123.154] SetEndOfFile (hFile=0x370) returned 1 [0123.160] SetEndOfFile (hFile=0x370) returned 1 [0123.167] SetEndOfFile (hFile=0x370) returned 1 [0123.174] SetEndOfFile (hFile=0x370) returned 1 [0123.179] SetEndOfFile (hFile=0x370) returned 1 [0123.184] SetEndOfFile (hFile=0x370) returned 1 [0123.191] SetEndOfFile (hFile=0x370) returned 1 [0123.198] SetEndOfFile (hFile=0x370) returned 1 [0123.204] SetEndOfFile (hFile=0x370) returned 1 [0123.211] SetEndOfFile (hFile=0x370) returned 1 [0123.222] SetEndOfFile (hFile=0x370) returned 1 [0123.229] SetEndOfFile (hFile=0x370) returned 1 [0123.235] SetEndOfFile (hFile=0x370) returned 1 [0123.242] SetEndOfFile (hFile=0x370) returned 1 [0123.250] SetEndOfFile (hFile=0x370) returned 1 [0123.257] SetEndOfFile (hFile=0x370) returned 1 [0123.264] SetEndOfFile (hFile=0x370) returned 1 [0123.270] SetEndOfFile (hFile=0x370) returned 1 [0123.278] SetEndOfFile (hFile=0x370) returned 1 [0123.284] SetEndOfFile (hFile=0x370) returned 1 [0123.290] SetEndOfFile (hFile=0x370) returned 1 [0123.295] SetEndOfFile (hFile=0x370) returned 1 [0123.301] SetEndOfFile (hFile=0x370) returned 1 [0123.310] SetEndOfFile (hFile=0x370) returned 1 [0123.316] SetEndOfFile (hFile=0x370) returned 1 [0123.324] SetEndOfFile (hFile=0x370) returned 1 [0123.331] SetEndOfFile (hFile=0x370) returned 1 [0123.337] SetEndOfFile (hFile=0x370) returned 1 [0123.344] SetEndOfFile (hFile=0x370) returned 1 [0123.351] SetEndOfFile (hFile=0x370) returned 1 [0123.358] SetEndOfFile (hFile=0x370) returned 1 [0123.365] SetEndOfFile (hFile=0x370) returned 1 [0123.372] SetEndOfFile (hFile=0x370) returned 1 [0123.378] SetEndOfFile (hFile=0x370) returned 1 [0123.385] SetEndOfFile (hFile=0x370) returned 1 [0123.401] SetEndOfFile (hFile=0x370) returned 1 [0123.407] SetEndOfFile (hFile=0x370) returned 1 [0123.411] SetEndOfFile (hFile=0x370) returned 1 [0123.430] SetEndOfFile (hFile=0x370) returned 1 [0123.438] SetEndOfFile (hFile=0x370) returned 1 [0123.448] SetEndOfFile (hFile=0x370) returned 1 [0123.457] SetEndOfFile (hFile=0x370) returned 1 [0123.532] SetEndOfFile (hFile=0x370) returned 1 [0123.539] SetEndOfFile (hFile=0x370) returned 1 [0123.548] SetEndOfFile (hFile=0x370) returned 1 [0123.555] SetEndOfFile (hFile=0x370) returned 1 [0123.562] SetEndOfFile (hFile=0x370) returned 1 [0123.567] SetEndOfFile (hFile=0x370) returned 1 [0123.577] SetEndOfFile (hFile=0x370) returned 1 [0123.584] SetEndOfFile (hFile=0x370) returned 1 [0123.593] SetEndOfFile (hFile=0x370) returned 1 [0123.600] SetEndOfFile (hFile=0x370) returned 1 [0123.758] SetEndOfFile (hFile=0x370) returned 1 [0123.768] SetEndOfFile (hFile=0x370) returned 1 [0123.773] SetEndOfFile (hFile=0x370) returned 1 [0123.780] SetEndOfFile (hFile=0x370) returned 1 [0123.787] SetEndOfFile (hFile=0x370) returned 1 [0123.794] SetEndOfFile (hFile=0x370) returned 1 [0123.801] SetEndOfFile (hFile=0x370) returned 1 [0123.809] SetEndOfFile (hFile=0x370) returned 1 [0123.815] SetEndOfFile (hFile=0x370) returned 1 [0123.825] SetEndOfFile (hFile=0x370) returned 1 [0123.832] SetEndOfFile (hFile=0x370) returned 1 [0123.855] SetEndOfFile (hFile=0x370) returned 1 [0123.862] SetEndOfFile (hFile=0x370) returned 1 [0123.872] SetEndOfFile (hFile=0x370) returned 1 [0123.879] SetEndOfFile (hFile=0x370) returned 1 [0123.887] SetEndOfFile (hFile=0x370) returned 1 [0123.894] SetEndOfFile (hFile=0x370) returned 1 [0123.902] SetEndOfFile (hFile=0x370) returned 1 [0123.907] SetEndOfFile (hFile=0x370) returned 1 [0123.914] SetEndOfFile (hFile=0x370) returned 1 [0123.922] SetEndOfFile (hFile=0x370) returned 1 [0123.928] SetEndOfFile (hFile=0x370) returned 1 [0123.938] SetEndOfFile (hFile=0x370) returned 1 [0123.945] SetEndOfFile (hFile=0x370) returned 1 [0123.951] SetEndOfFile (hFile=0x370) returned 1 [0123.961] SetEndOfFile (hFile=0x370) returned 1 [0123.969] SetEndOfFile (hFile=0x370) returned 1 [0123.977] SetEndOfFile (hFile=0x370) returned 1 [0123.995] SetEndOfFile (hFile=0x370) returned 1 [0124.005] SetEndOfFile (hFile=0x370) returned 1 [0124.020] SetEndOfFile (hFile=0x370) returned 1 [0124.031] SetEndOfFile (hFile=0x370) returned 1 [0124.042] SetEndOfFile (hFile=0x370) returned 1 [0124.053] SetEndOfFile (hFile=0x370) returned 1 [0124.069] SetEndOfFile (hFile=0x370) returned 1 [0124.079] SetEndOfFile (hFile=0x370) returned 1 [0124.084] SetEndOfFile (hFile=0x370) returned 1 [0124.090] SetEndOfFile (hFile=0x370) returned 1 [0124.100] SetEndOfFile (hFile=0x370) returned 1 [0124.106] SetEndOfFile (hFile=0x370) returned 1 [0124.110] SetEndOfFile (hFile=0x370) returned 1 [0124.118] SetEndOfFile (hFile=0x370) returned 1 [0124.126] SetEndOfFile (hFile=0x370) returned 1 [0124.131] SetEndOfFile (hFile=0x370) returned 1 [0124.143] SetEndOfFile (hFile=0x370) returned 1 [0124.150] SetEndOfFile (hFile=0x370) returned 1 [0124.158] SetEndOfFile (hFile=0x370) returned 1 [0124.162] SetEndOfFile (hFile=0x370) returned 1 [0124.170] SetEndOfFile (hFile=0x370) returned 1 [0124.180] SetEndOfFile (hFile=0x370) returned 1 [0124.185] SetEndOfFile (hFile=0x370) returned 1 [0124.197] SetEndOfFile (hFile=0x370) returned 1 [0124.209] SetEndOfFile (hFile=0x370) returned 1 [0124.214] SetEndOfFile (hFile=0x370) returned 1 [0124.220] SetEndOfFile (hFile=0x370) returned 1 [0124.229] SetEndOfFile (hFile=0x370) returned 1 [0124.237] SetEndOfFile (hFile=0x370) returned 1 [0124.247] SetEndOfFile (hFile=0x370) returned 1 [0124.255] SetEndOfFile (hFile=0x370) returned 1 [0124.265] SetEndOfFile (hFile=0x370) returned 1 [0124.270] SetEndOfFile (hFile=0x370) returned 1 [0124.278] SetEndOfFile (hFile=0x370) returned 1 [0124.288] SetEndOfFile (hFile=0x370) returned 1 [0124.296] SetEndOfFile (hFile=0x370) returned 1 [0124.303] SetEndOfFile (hFile=0x370) returned 1 [0124.313] SetEndOfFile (hFile=0x370) returned 1 [0124.320] SetEndOfFile (hFile=0x370) returned 1 [0124.328] SetEndOfFile (hFile=0x370) returned 1 [0124.337] SetEndOfFile (hFile=0x370) returned 1 [0124.348] SetEndOfFile (hFile=0x370) returned 1 [0124.355] SetEndOfFile (hFile=0x370) returned 1 [0124.361] SetEndOfFile (hFile=0x370) returned 1 [0124.366] SetEndOfFile (hFile=0x370) returned 1 [0124.370] SetEndOfFile (hFile=0x370) returned 1 [0124.376] SetEndOfFile (hFile=0x370) returned 1 [0124.382] SetEndOfFile (hFile=0x370) returned 1 [0124.389] SetEndOfFile (hFile=0x370) returned 1 [0124.395] SetEndOfFile (hFile=0x370) returned 1 [0124.402] SetEndOfFile (hFile=0x370) returned 1 [0124.408] SetEndOfFile (hFile=0x370) returned 1 [0124.416] SetEndOfFile (hFile=0x370) returned 1 [0124.421] SetEndOfFile (hFile=0x370) returned 1 [0124.425] SetEndOfFile (hFile=0x370) returned 1 [0124.432] SetEndOfFile (hFile=0x370) returned 1 [0124.443] SetEndOfFile (hFile=0x370) returned 1 [0124.450] SetEndOfFile (hFile=0x370) returned 1 [0124.457] SetEndOfFile (hFile=0x370) returned 1 [0124.464] SetEndOfFile (hFile=0x370) returned 1 [0124.470] SetEndOfFile (hFile=0x370) returned 1 [0124.477] SetEndOfFile (hFile=0x370) returned 1 [0124.483] SetEndOfFile (hFile=0x370) returned 1 [0124.490] SetEndOfFile (hFile=0x370) returned 1 [0124.495] SetEndOfFile (hFile=0x370) returned 1 [0124.500] SetEndOfFile (hFile=0x370) returned 1 [0124.509] SetEndOfFile (hFile=0x370) returned 1 [0124.515] SetEndOfFile (hFile=0x370) returned 1 [0124.522] SetEndOfFile (hFile=0x370) returned 1 [0124.534] SetEndOfFile (hFile=0x370) returned 1 [0124.543] SetEndOfFile (hFile=0x370) returned 1 [0124.551] SetEndOfFile (hFile=0x370) returned 1 [0124.558] SetEndOfFile (hFile=0x370) returned 1 [0124.561] SetEndOfFile (hFile=0x370) returned 1 [0124.572] SetEndOfFile (hFile=0x370) returned 1 [0124.580] SetEndOfFile (hFile=0x370) returned 1 [0124.587] SetEndOfFile (hFile=0x370) returned 1 [0124.597] SetEndOfFile (hFile=0x370) returned 1 [0124.639] SetEndOfFile (hFile=0x370) returned 1 [0124.645] SetEndOfFile (hFile=0x370) returned 1 [0124.655] SetEndOfFile (hFile=0x370) returned 1 [0124.659] SetEndOfFile (hFile=0x370) returned 1 [0124.667] SetEndOfFile (hFile=0x370) returned 1 [0124.673] SetEndOfFile (hFile=0x370) returned 1 [0124.683] SetEndOfFile (hFile=0x370) returned 1 [0124.689] SetEndOfFile (hFile=0x370) returned 1 [0124.698] SetEndOfFile (hFile=0x370) returned 1 [0124.703] SetEndOfFile (hFile=0x370) returned 1 [0124.708] SetEndOfFile (hFile=0x370) returned 1 [0124.714] SetEndOfFile (hFile=0x370) returned 1 [0124.719] SetEndOfFile (hFile=0x370) returned 1 [0124.725] SetEndOfFile (hFile=0x370) returned 1 [0124.739] SetEndOfFile (hFile=0x370) returned 1 [0124.748] SetEndOfFile (hFile=0x370) returned 1 [0124.756] SetEndOfFile (hFile=0x370) returned 1 [0124.763] SetEndOfFile (hFile=0x370) returned 1 [0124.769] SetEndOfFile (hFile=0x370) returned 1 [0124.776] SetEndOfFile (hFile=0x370) returned 1 [0124.782] SetEndOfFile (hFile=0x370) returned 1 [0124.789] SetEndOfFile (hFile=0x370) returned 1 [0124.795] SetEndOfFile (hFile=0x370) returned 1 [0124.801] SetEndOfFile (hFile=0x370) returned 1 [0124.807] SetEndOfFile (hFile=0x370) returned 1 [0124.812] SetEndOfFile (hFile=0x370) returned 1 [0124.818] SetEndOfFile (hFile=0x370) returned 1 [0124.824] SetEndOfFile (hFile=0x370) returned 1 [0124.830] SetEndOfFile (hFile=0x370) returned 1 [0124.839] SetEndOfFile (hFile=0x370) returned 1 [0124.858] SetEndOfFile (hFile=0x370) returned 1 [0124.868] SetEndOfFile (hFile=0x370) returned 1 [0124.874] SetEndOfFile (hFile=0x370) returned 1 [0124.883] SetEndOfFile (hFile=0x370) returned 1 [0124.889] SetEndOfFile (hFile=0x370) returned 1 [0124.896] SetEndOfFile (hFile=0x370) returned 1 [0124.902] SetEndOfFile (hFile=0x370) returned 1 [0124.907] SetEndOfFile (hFile=0x370) returned 1 [0124.912] SetEndOfFile (hFile=0x370) returned 1 [0124.919] SetEndOfFile (hFile=0x370) returned 1 [0124.925] SetEndOfFile (hFile=0x370) returned 1 [0124.933] SetEndOfFile (hFile=0x370) returned 1 [0124.944] SetEndOfFile (hFile=0x370) returned 1 [0124.960] SetEndOfFile (hFile=0x370) returned 1 [0124.973] SetEndOfFile (hFile=0x370) returned 1 [0124.978] SetEndOfFile (hFile=0x370) returned 1 [0124.983] SetEndOfFile (hFile=0x370) returned 1 [0124.994] SetEndOfFile (hFile=0x370) returned 1 [0125.003] SetEndOfFile (hFile=0x370) returned 1 [0125.012] SetEndOfFile (hFile=0x370) returned 1 [0125.021] SetEndOfFile (hFile=0x370) returned 1 [0125.032] SetEndOfFile (hFile=0x370) returned 1 [0125.039] SetEndOfFile (hFile=0x370) returned 1 [0125.047] SetEndOfFile (hFile=0x370) returned 1 [0125.056] SetEndOfFile (hFile=0x370) returned 1 [0125.066] SetEndOfFile (hFile=0x370) returned 1 [0125.077] SetEndOfFile (hFile=0x370) returned 1 [0125.081] SetEndOfFile (hFile=0x370) returned 1 [0125.088] SetEndOfFile (hFile=0x370) returned 1 [0125.094] SetEndOfFile (hFile=0x370) returned 1 [0125.102] SetEndOfFile (hFile=0x370) returned 1 [0125.108] SetEndOfFile (hFile=0x370) returned 1 [0125.114] SetEndOfFile (hFile=0x370) returned 1 [0125.121] SetEndOfFile (hFile=0x370) returned 1 [0125.127] SetEndOfFile (hFile=0x370) returned 1 [0125.133] SetEndOfFile (hFile=0x370) returned 1 [0125.137] SetEndOfFile (hFile=0x370) returned 1 [0125.144] SetEndOfFile (hFile=0x370) returned 1 [0125.150] SetEndOfFile (hFile=0x370) returned 1 [0125.157] SetEndOfFile (hFile=0x370) returned 1 [0125.165] SetEndOfFile (hFile=0x370) returned 1 [0125.172] SetEndOfFile (hFile=0x370) returned 1 [0125.178] SetEndOfFile (hFile=0x370) returned 1 [0125.186] SetEndOfFile (hFile=0x370) returned 1 [0125.194] SetEndOfFile (hFile=0x370) returned 1 [0125.201] SetEndOfFile (hFile=0x370) returned 1 [0125.207] SetEndOfFile (hFile=0x370) returned 1 [0125.215] SetEndOfFile (hFile=0x370) returned 1 [0125.221] SetEndOfFile (hFile=0x370) returned 1 [0125.226] SetEndOfFile (hFile=0x370) returned 1 [0125.232] SetEndOfFile (hFile=0x370) returned 1 [0125.239] SetEndOfFile (hFile=0x370) returned 1 [0125.249] SetEndOfFile (hFile=0x370) returned 1 [0125.257] SetEndOfFile (hFile=0x370) returned 1 [0125.264] SetEndOfFile (hFile=0x370) returned 1 [0125.270] SetEndOfFile (hFile=0x370) returned 1 [0125.278] SetEndOfFile (hFile=0x370) returned 1 [0125.284] SetEndOfFile (hFile=0x370) returned 1 [0125.291] SetEndOfFile (hFile=0x370) returned 1 [0125.297] SetEndOfFile (hFile=0x370) returned 1 [0125.304] SetEndOfFile (hFile=0x370) returned 1 [0125.311] SetEndOfFile (hFile=0x370) returned 1 [0125.316] SetEndOfFile (hFile=0x370) returned 1 [0125.324] SetEndOfFile (hFile=0x370) returned 1 [0125.330] SetEndOfFile (hFile=0x370) returned 1 [0125.337] SetEndOfFile (hFile=0x370) returned 1 [0125.346] SetEndOfFile (hFile=0x370) returned 1 [0125.356] SetEndOfFile (hFile=0x370) returned 1 [0125.364] SetEndOfFile (hFile=0x370) returned 1 [0125.370] SetEndOfFile (hFile=0x370) returned 1 [0125.374] SetEndOfFile (hFile=0x370) returned 1 [0125.383] SetEndOfFile (hFile=0x370) returned 1 [0125.392] SetEndOfFile (hFile=0x370) returned 1 [0125.398] SetEndOfFile (hFile=0x370) returned 1 [0125.408] SetEndOfFile (hFile=0x370) returned 1 [0125.426] SetEndOfFile (hFile=0x370) returned 1 [0125.463] SetEndOfFile (hFile=0x370) returned 1 [0125.476] SetEndOfFile (hFile=0x370) returned 1 [0125.484] SetEndOfFile (hFile=0x370) returned 1 [0125.558] SetEndOfFile (hFile=0x370) returned 1 [0125.562] SetEndOfFile (hFile=0x370) returned 1 [0125.567] SetEndOfFile (hFile=0x370) returned 1 [0125.573] SetEndOfFile (hFile=0x370) returned 1 [0125.579] SetEndOfFile (hFile=0x370) returned 1 [0125.584] SetEndOfFile (hFile=0x370) returned 1 [0125.590] SetEndOfFile (hFile=0x370) returned 1 [0125.598] SetEndOfFile (hFile=0x370) returned 1 [0125.620] SetEndOfFile (hFile=0x370) returned 1 [0125.626] SetEndOfFile (hFile=0x370) returned 1 [0125.630] SetEndOfFile (hFile=0x370) returned 1 [0125.634] SetEndOfFile (hFile=0x370) returned 1 [0125.640] SetEndOfFile (hFile=0x370) returned 1 [0125.645] SetEndOfFile (hFile=0x370) returned 1 [0125.650] SetEndOfFile (hFile=0x370) returned 1 [0125.656] SetEndOfFile (hFile=0x370) returned 1 [0125.664] SetEndOfFile (hFile=0x370) returned 1 [0125.669] SetEndOfFile (hFile=0x370) returned 1 [0125.675] SetEndOfFile (hFile=0x370) returned 1 [0125.680] SetEndOfFile (hFile=0x370) returned 1 [0125.685] SetEndOfFile (hFile=0x370) returned 1 [0125.691] SetEndOfFile (hFile=0x370) returned 1 [0125.696] SetEndOfFile (hFile=0x370) returned 1 [0125.704] SetEndOfFile (hFile=0x370) returned 1 [0125.708] SetEndOfFile (hFile=0x370) returned 1 [0125.722] SetEndOfFile (hFile=0x370) returned 1 [0125.729] SetEndOfFile (hFile=0x370) returned 1 [0125.735] SetEndOfFile (hFile=0x370) returned 1 [0125.744] SetEndOfFile (hFile=0x370) returned 1 [0125.750] SetEndOfFile (hFile=0x370) returned 1 [0125.757] SetEndOfFile (hFile=0x370) returned 1 [0125.763] SetEndOfFile (hFile=0x370) returned 1 [0125.770] SetEndOfFile (hFile=0x370) returned 1 [0125.779] SetEndOfFile (hFile=0x370) returned 1 [0125.785] SetEndOfFile (hFile=0x370) returned 1 [0125.792] SetEndOfFile (hFile=0x370) returned 1 [0125.798] SetEndOfFile (hFile=0x370) returned 1 [0125.803] SetEndOfFile (hFile=0x370) returned 1 [0125.810] SetEndOfFile (hFile=0x370) returned 1 [0125.816] SetEndOfFile (hFile=0x370) returned 1 [0125.822] SetEndOfFile (hFile=0x370) returned 1 [0125.831] SetEndOfFile (hFile=0x370) returned 1 [0125.841] SetEndOfFile (hFile=0x370) returned 1 [0125.850] SetEndOfFile (hFile=0x370) returned 1 [0125.856] SetEndOfFile (hFile=0x370) returned 1 [0125.860] SetEndOfFile (hFile=0x370) returned 1 [0125.869] SetEndOfFile (hFile=0x370) returned 1 [0125.879] SetEndOfFile (hFile=0x370) returned 1 [0125.887] SetEndOfFile (hFile=0x370) returned 1 [0125.900] SetEndOfFile (hFile=0x370) returned 1 [0125.924] SetEndOfFile (hFile=0x370) returned 1 [0125.934] SetEndOfFile (hFile=0x370) returned 1 [0125.943] SetEndOfFile (hFile=0x370) returned 1 [0125.952] SetEndOfFile (hFile=0x370) returned 1 [0125.959] SetEndOfFile (hFile=0x370) returned 1 [0125.965] SetEndOfFile (hFile=0x370) returned 1 [0125.970] SetEndOfFile (hFile=0x370) returned 1 [0125.977] SetEndOfFile (hFile=0x370) returned 1 [0125.983] SetEndOfFile (hFile=0x370) returned 1 [0125.991] SetEndOfFile (hFile=0x370) returned 1 [0125.998] SetEndOfFile (hFile=0x370) returned 1 [0126.004] SetEndOfFile (hFile=0x370) returned 1 [0126.010] SetEndOfFile (hFile=0x370) returned 1 [0126.018] SetEndOfFile (hFile=0x370) returned 1 [0126.025] SetEndOfFile (hFile=0x370) returned 1 [0126.029] SetEndOfFile (hFile=0x370) returned 1 [0126.036] SetEndOfFile (hFile=0x370) returned 1 [0126.043] SetEndOfFile (hFile=0x370) returned 1 [0126.049] SetEndOfFile (hFile=0x370) returned 1 [0126.058] SetEndOfFile (hFile=0x370) returned 1 [0126.064] SetEndOfFile (hFile=0x370) returned 1 [0126.071] SetEndOfFile (hFile=0x370) returned 1 [0126.077] SetEndOfFile (hFile=0x370) returned 1 [0126.084] SetEndOfFile (hFile=0x370) returned 1 [0126.092] SetEndOfFile (hFile=0x370) returned 1 [0126.102] SetEndOfFile (hFile=0x370) returned 1 [0126.108] SetEndOfFile (hFile=0x370) returned 1 [0126.114] SetEndOfFile (hFile=0x370) returned 1 [0126.120] SetEndOfFile (hFile=0x370) returned 1 [0126.127] SetEndOfFile (hFile=0x370) returned 1 [0126.133] SetEndOfFile (hFile=0x370) returned 1 [0126.140] SetEndOfFile (hFile=0x370) returned 1 [0126.148] SetEndOfFile (hFile=0x370) returned 1 [0126.154] SetEndOfFile (hFile=0x370) returned 1 [0126.160] SetEndOfFile (hFile=0x370) returned 1 [0126.167] SetEndOfFile (hFile=0x370) returned 1 [0126.173] SetEndOfFile (hFile=0x370) returned 1 [0126.180] SetEndOfFile (hFile=0x370) returned 1 [0126.186] SetEndOfFile (hFile=0x370) returned 1 [0126.193] SetEndOfFile (hFile=0x370) returned 1 [0126.198] SetEndOfFile (hFile=0x370) returned 1 [0126.202] SetEndOfFile (hFile=0x370) returned 1 [0126.210] SetEndOfFile (hFile=0x370) returned 1 [0126.216] SetEndOfFile (hFile=0x370) returned 1 [0126.223] SetEndOfFile (hFile=0x370) returned 1 [0126.232] SetEndOfFile (hFile=0x370) returned 1 [0126.242] SetEndOfFile (hFile=0x370) returned 1 [0126.253] SetEndOfFile (hFile=0x370) returned 1 [0126.259] SetEndOfFile (hFile=0x370) returned 1 [0126.263] SetEndOfFile (hFile=0x370) returned 1 [0126.272] SetEndOfFile (hFile=0x370) returned 1 [0126.284] SetEndOfFile (hFile=0x370) returned 1 [0126.291] SetEndOfFile (hFile=0x370) returned 1 [0126.300] SetEndOfFile (hFile=0x370) returned 1 [0126.309] SetEndOfFile (hFile=0x370) returned 1 [0126.315] SetEndOfFile (hFile=0x370) returned 1 [0126.324] SetEndOfFile (hFile=0x370) returned 1 [0126.333] SetEndOfFile (hFile=0x370) returned 1 [0126.344] SetEndOfFile (hFile=0x370) returned 1 [0126.349] SetEndOfFile (hFile=0x370) returned 1 [0126.354] SetEndOfFile (hFile=0x370) returned 1 [0126.360] SetEndOfFile (hFile=0x370) returned 1 [0126.369] SetEndOfFile (hFile=0x370) returned 1 [0126.427] SetEndOfFile (hFile=0x370) returned 1 [0126.433] SetEndOfFile (hFile=0x370) returned 1 [0126.440] SetEndOfFile (hFile=0x370) returned 1 [0126.447] SetEndOfFile (hFile=0x370) returned 1 [0126.454] SetEndOfFile (hFile=0x370) returned 1 [0126.467] SetEndOfFile (hFile=0x370) returned 1 [0126.473] SetEndOfFile (hFile=0x370) returned 1 [0126.481] SetEndOfFile (hFile=0x370) returned 1 [0126.497] SetEndOfFile (hFile=0x1e4) returned 1 [0126.506] SetEndOfFile (hFile=0x1e4) returned 1 [0126.513] SetEndOfFile (hFile=0x1e4) returned 1 [0126.525] SetEndOfFile (hFile=0x1e4) returned 1 [0126.532] SetEndOfFile (hFile=0x1e4) returned 1 [0126.537] SetEndOfFile (hFile=0x1e4) returned 1 [0126.544] SetEndOfFile (hFile=0x1e4) returned 1 [0126.554] SetEndOfFile (hFile=0x1e4) returned 1 [0126.574] SetEndOfFile (hFile=0x1e4) returned 1 [0126.579] SetEndOfFile (hFile=0x1e4) returned 1 [0126.582] SetEndOfFile (hFile=0x1e4) returned 1 [0126.585] SetEndOfFile (hFile=0x1e4) returned 1 [0126.587] SetEndOfFile (hFile=0x1e4) returned 1 [0126.590] SetEndOfFile (hFile=0x1e4) returned 1 [0126.592] SetEndOfFile (hFile=0x1e4) returned 1 [0126.597] SetEndOfFile (hFile=0x1e4) returned 1 [0126.604] SetEndOfFile (hFile=0x1e4) returned 1 [0126.612] SetEndOfFile (hFile=0x1e4) returned 1 [0126.662] SetEndOfFile (hFile=0x1e4) returned 1 [0126.677] SetEndOfFile (hFile=0x1e4) returned 1 [0126.685] SetEndOfFile (hFile=0x1e4) returned 1 [0126.695] SetEndOfFile (hFile=0x1e4) returned 1 [0126.702] SetEndOfFile (hFile=0x1e4) returned 1 [0126.712] SetEndOfFile (hFile=0x1e4) returned 1 [0126.720] SetEndOfFile (hFile=0x1e4) returned 1 [0126.729] SetEndOfFile (hFile=0x1e4) returned 1 [0126.737] SetEndOfFile (hFile=0x1e4) returned 1 [0126.753] SetEndOfFile (hFile=0x1e4) returned 1 [0126.764] SetEndOfFile (hFile=0x1e4) returned 1 [0126.771] SetEndOfFile (hFile=0x1e4) returned 1 [0126.778] SetEndOfFile (hFile=0x1e4) returned 1 [0126.789] SetEndOfFile (hFile=0x1e4) returned 1 [0126.799] SetEndOfFile (hFile=0x1e4) returned 1 [0126.805] SetEndOfFile (hFile=0x1e4) returned 1 [0126.810] SetEndOfFile (hFile=0x1e4) returned 1 [0126.816] SetEndOfFile (hFile=0x1e4) returned 1 [0126.825] SetEndOfFile (hFile=0x1e4) returned 1 [0126.835] SetEndOfFile (hFile=0x1e4) returned 1 [0126.842] SetEndOfFile (hFile=0x1e4) returned 1 [0126.848] SetEndOfFile (hFile=0x1e4) returned 1 [0126.864] SetEndOfFile (hFile=0x1e4) returned 1 [0126.870] SetEndOfFile (hFile=0x1e4) returned 1 [0126.876] SetEndOfFile (hFile=0x1e4) returned 1 [0126.884] SetEndOfFile (hFile=0x1e4) returned 1 [0126.894] SetEndOfFile (hFile=0x1e4) returned 1 [0126.901] SetEndOfFile (hFile=0x1e4) returned 1 [0126.907] SetEndOfFile (hFile=0x1e4) returned 1 [0126.915] SetEndOfFile (hFile=0x1e4) returned 1 [0126.939] SetEndOfFile (hFile=0x1e4) returned 1 [0126.946] SetEndOfFile (hFile=0x1e4) returned 1 [0126.952] SetEndOfFile (hFile=0x1e4) returned 1 [0126.958] SetEndOfFile (hFile=0x1e4) returned 1 [0126.964] SetEndOfFile (hFile=0x1e4) returned 1 [0126.970] SetEndOfFile (hFile=0x1e4) returned 1 [0126.978] SetEndOfFile (hFile=0x1e4) returned 1 [0126.984] SetEndOfFile (hFile=0x1e4) returned 1 [0126.990] SetEndOfFile (hFile=0x1e4) returned 1 [0126.997] SetEndOfFile (hFile=0x1e4) returned 1 [0127.003] SetEndOfFile (hFile=0x1e4) returned 1 [0127.008] SetEndOfFile (hFile=0x1e4) returned 1 [0127.014] SetEndOfFile (hFile=0x1e4) returned 1 [0127.018] SetEndOfFile (hFile=0x1e4) returned 1 [0127.029] SetEndOfFile (hFile=0x1e4) returned 1 [0127.035] SetEndOfFile (hFile=0x1e4) returned 1 [0127.042] SetEndOfFile (hFile=0x1e4) returned 1 [0127.049] SetEndOfFile (hFile=0x1e4) returned 1 [0127.056] SetEndOfFile (hFile=0x1e4) returned 1 [0127.079] SetEndOfFile (hFile=0x1e4) returned 1 [0127.086] SetEndOfFile (hFile=0x1e4) returned 1 [0127.093] SetEndOfFile (hFile=0x1e4) returned 1 [0127.098] SetEndOfFile (hFile=0x1e4) returned 1 [0127.106] SetEndOfFile (hFile=0x1e4) returned 1 [0127.112] SetEndOfFile (hFile=0x1e4) returned 1 [0127.119] SetEndOfFile (hFile=0x1e4) returned 1 [0127.126] SetEndOfFile (hFile=0x1e4) returned 1 [0127.132] SetEndOfFile (hFile=0x1e4) returned 1 [0127.137] SetEndOfFile (hFile=0x1e4) returned 1 [0127.145] SetEndOfFile (hFile=0x1e4) returned 1 [0127.151] SetEndOfFile (hFile=0x1e4) returned 1 [0127.156] SetEndOfFile (hFile=0x1e4) returned 1 [0127.168] SetEndOfFile (hFile=0x1e4) returned 1 [0127.173] SetEndOfFile (hFile=0x1e4) returned 1 [0127.181] SetEndOfFile (hFile=0x1e4) returned 1 [0127.186] SetEndOfFile (hFile=0x1e4) returned 1 [0127.193] SetEndOfFile (hFile=0x1e4) returned 1 [0127.199] SetEndOfFile (hFile=0x1e4) returned 1 [0127.205] SetEndOfFile (hFile=0x1e4) returned 1 [0127.213] SetEndOfFile (hFile=0x1e4) returned 1 [0127.222] SetEndOfFile (hFile=0x1e4) returned 1 [0127.228] SetEndOfFile (hFile=0x1e4) returned 1 [0127.235] SetEndOfFile (hFile=0x1e4) returned 1 [0127.259] SetEndOfFile (hFile=0x1e4) returned 1 [0127.267] SetEndOfFile (hFile=0x1e4) returned 1 [0127.273] SetEndOfFile (hFile=0x1e4) returned 1 [0127.280] SetEndOfFile (hFile=0x1e4) returned 1 [0127.286] SetEndOfFile (hFile=0x1e4) returned 1 [0127.292] SetEndOfFile (hFile=0x1e4) returned 1 [0127.298] SetEndOfFile (hFile=0x1e4) returned 1 [0127.308] SetEndOfFile (hFile=0x1e4) returned 1 [0127.314] SetEndOfFile (hFile=0x1e4) returned 1 [0127.320] SetEndOfFile (hFile=0x1e4) returned 1 [0127.328] SetEndOfFile (hFile=0x1e4) returned 1 [0127.334] SetEndOfFile (hFile=0x1e4) returned 1 [0127.339] SetEndOfFile (hFile=0x1e4) returned 1 [0127.345] SetEndOfFile (hFile=0x1e4) returned 1 [0127.352] SetEndOfFile (hFile=0x1e4) returned 1 [0127.357] SetEndOfFile (hFile=0x1e4) returned 1 [0127.404] SetEndOfFile (hFile=0x1e4) returned 1 [0127.411] SetEndOfFile (hFile=0x1e4) returned 1 [0127.416] SetEndOfFile (hFile=0x1e4) returned 1 [0127.423] SetEndOfFile (hFile=0x1e4) returned 1 [0127.436] SetEndOfFile (hFile=0x1e4) returned 1 [0127.441] SetEndOfFile (hFile=0x1e4) returned 1 [0127.453] SetEndOfFile (hFile=0x1e4) returned 1 [0127.460] SetEndOfFile (hFile=0x1e4) returned 1 [0127.465] SetEndOfFile (hFile=0x1e4) returned 1 [0127.469] SetEndOfFile (hFile=0x1e4) returned 1 [0127.476] SetEndOfFile (hFile=0x1e4) returned 1 [0127.482] SetEndOfFile (hFile=0x1e4) returned 1 [0127.488] SetEndOfFile (hFile=0x1e4) returned 1 [0127.494] SetEndOfFile (hFile=0x1e4) returned 1 [0127.542] SetEndOfFile (hFile=0x1e4) returned 1 [0127.547] SetEndOfFile (hFile=0x1e4) returned 1 [0127.558] SetEndOfFile (hFile=0x1e4) returned 1 [0127.563] SetEndOfFile (hFile=0x1e4) returned 1 [0127.568] SetEndOfFile (hFile=0x1e4) returned 1 [0127.573] SetEndOfFile (hFile=0x1e4) returned 1 [0127.577] SetEndOfFile (hFile=0x1e4) returned 1 [0127.582] SetEndOfFile (hFile=0x1e4) returned 1 [0127.586] SetEndOfFile (hFile=0x1e4) returned 1 [0127.591] SetEndOfFile (hFile=0x1e4) returned 1 [0127.597] SetEndOfFile (hFile=0x1e4) returned 1 [0127.602] SetEndOfFile (hFile=0x1e4) returned 1 [0127.607] SetEndOfFile (hFile=0x1e4) returned 1 [0127.630] SetEndOfFile (hFile=0x1e4) returned 1 [0127.634] SetEndOfFile (hFile=0x1e4) returned 1 [0127.641] SetEndOfFile (hFile=0x1e4) returned 1 [0127.646] SetEndOfFile (hFile=0x1e4) returned 1 [0127.653] SetEndOfFile (hFile=0x1e4) returned 1 [0127.658] SetEndOfFile (hFile=0x1e4) returned 1 [0127.664] SetEndOfFile (hFile=0x1e4) returned 1 [0127.669] SetEndOfFile (hFile=0x1e4) returned 1 [0127.674] SetEndOfFile (hFile=0x1e4) returned 1 [0127.693] SetEndOfFile (hFile=0x1e4) returned 1 [0127.698] SetEndOfFile (hFile=0x1e4) returned 1 [0127.710] SetEndOfFile (hFile=0x1e4) returned 1 [0127.717] SetEndOfFile (hFile=0x1e4) returned 1 [0127.734] SetEndOfFile (hFile=0x1e4) returned 1 [0127.741] SetEndOfFile (hFile=0x1e4) returned 1 [0127.746] SetEndOfFile (hFile=0x1e4) returned 1 [0127.754] SetEndOfFile (hFile=0x1e4) returned 1 [0127.760] SetEndOfFile (hFile=0x1e4) returned 1 [0127.777] SetEndOfFile (hFile=0x1e4) returned 1 [0127.784] SetEndOfFile (hFile=0x1e4) returned 1 [0127.790] SetEndOfFile (hFile=0x1e4) returned 1 [0127.797] SetEndOfFile (hFile=0x1e4) returned 1 [0127.804] SetEndOfFile (hFile=0x1e4) returned 1 [0127.809] SetEndOfFile (hFile=0x1e4) returned 1 [0127.837] SetEndOfFile (hFile=0x1e4) returned 1 [0127.849] SetEndOfFile (hFile=0x1e4) returned 1 [0127.855] SetEndOfFile (hFile=0x1e4) returned 1 [0127.862] SetEndOfFile (hFile=0x1e4) returned 1 [0127.869] SetEndOfFile (hFile=0x1e4) returned 1 [0127.883] SetEndOfFile (hFile=0x1e4) returned 1 [0127.894] SetEndOfFile (hFile=0x1e4) returned 1 [0127.900] SetEndOfFile (hFile=0x1e4) returned 1 [0127.906] SetEndOfFile (hFile=0x1e4) returned 1 [0127.913] SetEndOfFile (hFile=0x1e4) returned 1 [0127.921] SetEndOfFile (hFile=0x1e4) returned 1 [0127.930] SetEndOfFile (hFile=0x1e4) returned 1 [0127.935] SetEndOfFile (hFile=0x1e4) returned 1 [0127.953] SetEndOfFile (hFile=0x1e4) returned 1 [0127.967] SetEndOfFile (hFile=0x1e4) returned 1 [0127.971] SetEndOfFile (hFile=0x1e4) returned 1 [0127.976] SetEndOfFile (hFile=0x1e4) returned 1 [0127.981] SetEndOfFile (hFile=0x1e4) returned 1 [0127.985] SetEndOfFile (hFile=0x1e4) returned 1 [0127.996] SetEndOfFile (hFile=0x1e4) returned 1 [0128.001] SetEndOfFile (hFile=0x1e4) returned 1 [0128.006] SetEndOfFile (hFile=0x1e4) returned 1 [0128.011] SetEndOfFile (hFile=0x1e4) returned 1 [0128.015] SetEndOfFile (hFile=0x1e4) returned 1 [0128.021] SetEndOfFile (hFile=0x1e4) returned 1 [0128.026] SetEndOfFile (hFile=0x1e4) returned 1 [0128.035] SetEndOfFile (hFile=0x1e4) returned 1 [0128.041] SetEndOfFile (hFile=0x1e4) returned 1 [0128.047] SetEndOfFile (hFile=0x1e4) returned 1 [0128.052] SetEndOfFile (hFile=0x1e4) returned 1 [0128.057] SetEndOfFile (hFile=0x1e4) returned 1 [0128.062] SetEndOfFile (hFile=0x1e4) returned 1 [0128.070] SetEndOfFile (hFile=0x1e4) returned 1 [0128.075] SetEndOfFile (hFile=0x1e4) returned 1 [0128.081] SetEndOfFile (hFile=0x1e4) returned 1 [0128.085] SetEndOfFile (hFile=0x1e4) returned 1 [0128.089] SetEndOfFile (hFile=0x1e4) returned 1 [0128.095] SetEndOfFile (hFile=0x1e4) returned 1 [0128.100] SetEndOfFile (hFile=0x1e4) returned 1 [0128.105] SetEndOfFile (hFile=0x1e4) returned 1 [0128.110] SetEndOfFile (hFile=0x1e4) returned 1 [0128.115] SetEndOfFile (hFile=0x1e4) returned 1 [0128.122] SetEndOfFile (hFile=0x1e4) returned 1 [0128.127] SetEndOfFile (hFile=0x1e4) returned 1 [0128.132] SetEndOfFile (hFile=0x1e4) returned 1 [0128.138] SetEndOfFile (hFile=0x1e4) returned 1 [0128.144] SetEndOfFile (hFile=0x1e4) returned 1 [0128.148] SetEndOfFile (hFile=0x1e4) returned 1 [0128.153] SetEndOfFile (hFile=0x1e4) returned 1 [0128.159] SetEndOfFile (hFile=0x1e4) returned 1 [0128.163] SetEndOfFile (hFile=0x1e4) returned 1 [0128.168] SetEndOfFile (hFile=0x1e4) returned 1 [0128.174] SetEndOfFile (hFile=0x1e4) returned 1 [0128.178] SetEndOfFile (hFile=0x1e4) returned 1 [0128.187] SetEndOfFile (hFile=0x1e4) returned 1 [0128.192] SetEndOfFile (hFile=0x1e4) returned 1 [0128.196] SetEndOfFile (hFile=0x1e4) returned 1 [0128.203] SetEndOfFile (hFile=0x1e4) returned 1 [0128.209] SetEndOfFile (hFile=0x1e4) returned 1 [0128.218] SetEndOfFile (hFile=0x1e4) returned 1 [0128.223] SetEndOfFile (hFile=0x1e4) returned 1 [0128.231] SetEndOfFile (hFile=0x1e4) returned 1 [0128.237] SetEndOfFile (hFile=0x1e4) returned 1 [0128.242] SetEndOfFile (hFile=0x1e4) returned 1 [0128.247] SetEndOfFile (hFile=0x1e4) returned 1 [0128.253] SetEndOfFile (hFile=0x1e4) returned 1 [0128.258] SetEndOfFile (hFile=0x1e4) returned 1 [0128.266] SetEndOfFile (hFile=0x1e4) returned 1 [0128.275] SetEndOfFile (hFile=0x1e4) returned 1 [0128.280] SetEndOfFile (hFile=0x1e4) returned 1 [0128.285] SetEndOfFile (hFile=0x1e4) returned 1 [0128.290] SetEndOfFile (hFile=0x1e4) returned 1 [0128.295] SetEndOfFile (hFile=0x1e4) returned 1 [0128.300] SetEndOfFile (hFile=0x1e4) returned 1 [0128.304] SetEndOfFile (hFile=0x1e4) returned 1 [0128.309] SetEndOfFile (hFile=0x1e4) returned 1 [0128.314] SetEndOfFile (hFile=0x1e4) returned 1 [0128.319] SetEndOfFile (hFile=0x1e4) returned 1 [0128.324] SetEndOfFile (hFile=0x1e4) returned 1 [0128.329] SetEndOfFile (hFile=0x1e4) returned 1 [0128.336] SetEndOfFile (hFile=0x1e4) returned 1 [0128.345] SetEndOfFile (hFile=0x1e4) returned 1 [0128.352] SetEndOfFile (hFile=0x1e4) returned 1 [0128.357] SetEndOfFile (hFile=0x1e4) returned 1 [0128.362] SetEndOfFile (hFile=0x1e4) returned 1 [0128.368] SetEndOfFile (hFile=0x1e4) returned 1 [0128.374] SetEndOfFile (hFile=0x1e4) returned 1 [0128.429] SetEndOfFile (hFile=0x1e4) returned 1 [0128.437] SetEndOfFile (hFile=0x1e4) returned 1 [0128.444] SetEndOfFile (hFile=0x1e4) returned 1 [0128.450] SetEndOfFile (hFile=0x1e4) returned 1 [0128.459] SetEndOfFile (hFile=0x1e4) returned 1 [0128.466] SetEndOfFile (hFile=0x1e4) returned 1 [0128.483] SetEndOfFile (hFile=0x1e8) returned 1 [0128.491] SetEndOfFile (hFile=0x1e8) returned 1 [0128.496] SetEndOfFile (hFile=0x1e8) returned 1 [0128.501] SetEndOfFile (hFile=0x1e8) returned 1 [0128.507] SetEndOfFile (hFile=0x1e8) returned 1 [0128.512] SetEndOfFile (hFile=0x1e8) returned 1 [0128.518] SetEndOfFile (hFile=0x1e8) returned 1 [0128.523] SetEndOfFile (hFile=0x1e8) returned 1 [0128.529] SetEndOfFile (hFile=0x1e8) returned 1 [0128.534] SetEndOfFile (hFile=0x1e8) returned 1 [0128.543] SetEndOfFile (hFile=0x1e8) returned 1 [0128.549] SetEndOfFile (hFile=0x1e8) returned 1 [0128.556] SetEndOfFile (hFile=0x1e8) returned 1 [0128.561] SetEndOfFile (hFile=0x1e8) returned 1 [0128.569] SetEndOfFile (hFile=0x1e8) returned 1 [0128.581] SetEndOfFile (hFile=0x1e8) returned 1 [0128.586] SetEndOfFile (hFile=0x1e8) returned 1 [0128.591] SetEndOfFile (hFile=0x1e8) returned 1 [0128.597] SetEndOfFile (hFile=0x1e8) returned 1 [0128.606] SetEndOfFile (hFile=0x1e8) returned 1 [0128.641] SetEndOfFile (hFile=0x1e8) returned 1 [0128.648] SetEndOfFile (hFile=0x1e8) returned 1 [0128.654] SetEndOfFile (hFile=0x1e8) returned 1 [0128.662] SetEndOfFile (hFile=0x1e8) returned 1 [0128.668] SetEndOfFile (hFile=0x1e8) returned 1 [0128.675] SetEndOfFile (hFile=0x1e8) returned 1 [0128.683] SetEndOfFile (hFile=0x1e8) returned 1 [0128.692] SetEndOfFile (hFile=0x1e8) returned 1 [0128.697] SetEndOfFile (hFile=0x1e8) returned 1 [0128.702] SetEndOfFile (hFile=0x1e8) returned 1 [0128.707] SetEndOfFile (hFile=0x1e8) returned 1 [0128.711] SetEndOfFile (hFile=0x1e8) returned 1 [0128.715] SetEndOfFile (hFile=0x1e8) returned 1 [0128.719] SetEndOfFile (hFile=0x1e8) returned 1 [0128.726] SetEndOfFile (hFile=0x1e8) returned 1 [0128.730] SetEndOfFile (hFile=0x1e8) returned 1 [0128.736] SetEndOfFile (hFile=0x1e8) returned 1 [0128.741] SetEndOfFile (hFile=0x1e8) returned 1 [0128.745] SetEndOfFile (hFile=0x1e8) returned 1 [0128.750] SetEndOfFile (hFile=0x1e8) returned 1 [0128.759] SetEndOfFile (hFile=0x1e8) returned 1 [0128.764] SetEndOfFile (hFile=0x1e8) returned 1 [0128.769] SetEndOfFile (hFile=0x1e8) returned 1 [0128.774] SetEndOfFile (hFile=0x1e8) returned 1 [0128.779] SetEndOfFile (hFile=0x1e8) returned 1 [0128.785] SetEndOfFile (hFile=0x1e8) returned 1 [0128.790] SetEndOfFile (hFile=0x1e8) returned 1 [0128.795] SetEndOfFile (hFile=0x1e8) returned 1 [0128.799] SetEndOfFile (hFile=0x1e8) returned 1 [0128.807] SetEndOfFile (hFile=0x1e8) returned 1 [0128.811] SetEndOfFile (hFile=0x1e8) returned 1 [0128.816] SetEndOfFile (hFile=0x1e8) returned 1 [0128.821] SetEndOfFile (hFile=0x1e8) returned 1 [0128.826] SetEndOfFile (hFile=0x1e8) returned 1 [0128.831] SetEndOfFile (hFile=0x1e8) returned 1 [0128.836] SetEndOfFile (hFile=0x1e8) returned 1 [0128.842] SetEndOfFile (hFile=0x1e8) returned 1 [0128.847] SetEndOfFile (hFile=0x1e8) returned 1 [0128.851] SetEndOfFile (hFile=0x1e8) returned 1 [0128.856] SetEndOfFile (hFile=0x1e8) returned 1 [0128.861] SetEndOfFile (hFile=0x1e8) returned 1 [0128.865] SetEndOfFile (hFile=0x1e8) returned 1 [0128.870] SetEndOfFile (hFile=0x1e8) returned 1 [0128.875] SetEndOfFile (hFile=0x1e8) returned 1 [0128.880] SetEndOfFile (hFile=0x1e8) returned 1 [0128.887] SetEndOfFile (hFile=0x1e8) returned 1 [0128.896] SetEndOfFile (hFile=0x1e8) returned 1 [0128.901] SetEndOfFile (hFile=0x1e8) returned 1 [0128.908] SetEndOfFile (hFile=0x1e8) returned 1 [0128.913] SetEndOfFile (hFile=0x1e8) returned 1 [0128.918] SetEndOfFile (hFile=0x1e8) returned 1 [0128.924] SetEndOfFile (hFile=0x1e8) returned 1 [0128.929] SetEndOfFile (hFile=0x1e8) returned 1 [0128.933] SetEndOfFile (hFile=0x1e8) returned 1 [0128.938] SetEndOfFile (hFile=0x1e8) returned 1 [0128.943] SetEndOfFile (hFile=0x1e8) returned 1 [0128.948] SetEndOfFile (hFile=0x1e8) returned 1 [0128.952] SetEndOfFile (hFile=0x1e8) returned 1 [0128.956] SetEndOfFile (hFile=0x1e8) returned 1 [0128.961] SetEndOfFile (hFile=0x1e8) returned 1 [0128.966] SetEndOfFile (hFile=0x1e8) returned 1 [0128.982] SetEndOfFile (hFile=0x1e8) returned 1 [0128.988] SetEndOfFile (hFile=0x1e8) returned 1 [0128.995] SetEndOfFile (hFile=0x1e8) returned 1 [0129.001] SetEndOfFile (hFile=0x1e8) returned 1 [0129.005] SetEndOfFile (hFile=0x1e8) returned 1 [0129.010] SetEndOfFile (hFile=0x1e8) returned 1 [0129.017] SetEndOfFile (hFile=0x1e8) returned 1 [0129.022] SetEndOfFile (hFile=0x1e8) returned 1 [0129.027] SetEndOfFile (hFile=0x1e8) returned 1 [0129.040] SetEndOfFile (hFile=0x1e8) returned 1 [0129.046] SetEndOfFile (hFile=0x1e8) returned 1 [0129.054] SetEndOfFile (hFile=0x1e8) returned 1 [0129.060] SetEndOfFile (hFile=0x1e8) returned 1 [0129.066] SetEndOfFile (hFile=0x1e8) returned 1 [0129.073] SetEndOfFile (hFile=0x1e8) returned 1 [0129.078] SetEndOfFile (hFile=0x1e8) returned 1 [0129.083] SetEndOfFile (hFile=0x1e8) returned 1 [0129.088] SetEndOfFile (hFile=0x1e8) returned 1 [0129.092] SetEndOfFile (hFile=0x1e8) returned 1 [0129.096] SetEndOfFile (hFile=0x1e8) returned 1 [0129.101] SetEndOfFile (hFile=0x1e8) returned 1 [0129.105] SetEndOfFile (hFile=0x1e8) returned 1 [0129.112] SetEndOfFile (hFile=0x1e8) returned 1 [0129.116] SetEndOfFile (hFile=0x1e8) returned 1 [0129.120] SetEndOfFile (hFile=0x1e8) returned 1 [0129.127] SetEndOfFile (hFile=0x1e8) returned 1 [0129.132] SetEndOfFile (hFile=0x1e8) returned 1 [0129.136] SetEndOfFile (hFile=0x1e8) returned 1 [0129.147] SetEndOfFile (hFile=0x1e8) returned 1 [0129.152] SetEndOfFile (hFile=0x1e8) returned 1 [0129.157] SetEndOfFile (hFile=0x1e8) returned 1 [0129.162] SetEndOfFile (hFile=0x1e8) returned 1 [0129.167] SetEndOfFile (hFile=0x1e8) returned 1 [0129.171] SetEndOfFile (hFile=0x1e8) returned 1 [0129.177] SetEndOfFile (hFile=0x1e8) returned 1 [0129.181] SetEndOfFile (hFile=0x1e8) returned 1 [0129.188] SetEndOfFile (hFile=0x1e8) returned 1 [0129.197] SetEndOfFile (hFile=0x1e8) returned 1 [0129.202] SetEndOfFile (hFile=0x1e8) returned 1 [0129.208] SetEndOfFile (hFile=0x1e8) returned 1 [0129.212] SetEndOfFile (hFile=0x1e8) returned 1 [0129.216] SetEndOfFile (hFile=0x1e8) returned 1 [0129.221] SetEndOfFile (hFile=0x1e8) returned 1 [0129.225] SetEndOfFile (hFile=0x1e8) returned 1 [0129.232] SetEndOfFile (hFile=0x1e8) returned 1 [0129.238] SetEndOfFile (hFile=0x1e8) returned 1 [0129.243] SetEndOfFile (hFile=0x1e8) returned 1 [0129.251] SetEndOfFile (hFile=0x1e8) returned 1 [0129.258] SetEndOfFile (hFile=0x1e8) returned 1 [0129.264] SetEndOfFile (hFile=0x1e8) returned 1 [0129.274] SetEndOfFile (hFile=0x1e8) returned 1 [0129.279] SetEndOfFile (hFile=0x1e8) returned 1 [0129.284] SetEndOfFile (hFile=0x1e8) returned 1 [0129.289] SetEndOfFile (hFile=0x1e8) returned 1 [0129.294] SetEndOfFile (hFile=0x1e8) returned 1 [0129.298] SetEndOfFile (hFile=0x1e8) returned 1 [0129.303] SetEndOfFile (hFile=0x1e8) returned 1 [0129.308] SetEndOfFile (hFile=0x1e8) returned 1 [0129.314] SetEndOfFile (hFile=0x1e8) returned 1 [0129.319] SetEndOfFile (hFile=0x1e8) returned 1 [0129.324] SetEndOfFile (hFile=0x1e8) returned 1 [0129.332] SetEndOfFile (hFile=0x1e8) returned 1 [0129.337] SetEndOfFile (hFile=0x1e8) returned 1 [0129.341] SetEndOfFile (hFile=0x1e8) returned 1 [0129.346] SetEndOfFile (hFile=0x1e8) returned 1 [0129.352] SetEndOfFile (hFile=0x1e8) returned 1 [0129.357] SetEndOfFile (hFile=0x1e8) returned 1 [0129.362] SetEndOfFile (hFile=0x1e8) returned 1 [0129.367] SetEndOfFile (hFile=0x1e8) returned 1 [0129.372] SetEndOfFile (hFile=0x1e8) returned 1 [0129.377] SetEndOfFile (hFile=0x1e8) returned 1 [0129.381] SetEndOfFile (hFile=0x1e8) returned 1 [0129.388] SetEndOfFile (hFile=0x1e8) returned 1 [0129.393] SetEndOfFile (hFile=0x1e8) returned 1 [0129.397] SetEndOfFile (hFile=0x1e8) returned 1 [0129.402] SetEndOfFile (hFile=0x1e8) returned 1 [0129.413] SetEndOfFile (hFile=0x1e8) returned 1 [0129.419] SetEndOfFile (hFile=0x1e8) returned 1 [0129.424] SetEndOfFile (hFile=0x1e8) returned 1 [0129.429] SetEndOfFile (hFile=0x1e8) returned 1 [0129.433] SetEndOfFile (hFile=0x1e8) returned 1 [0129.439] SetEndOfFile (hFile=0x1e8) returned 1 [0129.443] SetEndOfFile (hFile=0x1e8) returned 1 [0129.457] SetEndOfFile (hFile=0x1e8) returned 1 [0129.462] SetEndOfFile (hFile=0x1e8) returned 1 [0129.467] SetEndOfFile (hFile=0x1e8) returned 1 [0129.473] SetEndOfFile (hFile=0x1e8) returned 1 [0129.477] SetEndOfFile (hFile=0x1e8) returned 1 [0129.486] SetEndOfFile (hFile=0x1e8) returned 1 [0129.491] SetEndOfFile (hFile=0x1e8) returned 1 [0129.495] SetEndOfFile (hFile=0x1e8) returned 1 [0129.503] SetEndOfFile (hFile=0x1e8) returned 1 [0129.507] SetEndOfFile (hFile=0x1e8) returned 1 [0129.512] SetEndOfFile (hFile=0x1e8) returned 1 [0129.517] SetEndOfFile (hFile=0x1e8) returned 1 [0129.521] SetEndOfFile (hFile=0x1e8) returned 1 [0129.526] SetEndOfFile (hFile=0x1e8) returned 1 [0129.531] SetEndOfFile (hFile=0x1e8) returned 1 [0129.537] SetEndOfFile (hFile=0x1e8) returned 1 [0129.542] SetEndOfFile (hFile=0x1e8) returned 1 [0129.546] SetEndOfFile (hFile=0x1e8) returned 1 [0129.551] SetEndOfFile (hFile=0x1e8) returned 1 [0129.556] SetEndOfFile (hFile=0x1e8) returned 1 [0129.560] SetEndOfFile (hFile=0x1e8) returned 1 [0129.566] SetEndOfFile (hFile=0x1e8) returned 1 [0129.571] SetEndOfFile (hFile=0x1e8) returned 1 [0129.575] SetEndOfFile (hFile=0x1e8) returned 1 [0129.580] SetEndOfFile (hFile=0x1e8) returned 1 [0129.584] SetEndOfFile (hFile=0x1e8) returned 1 [0129.589] SetEndOfFile (hFile=0x1e8) returned 1 [0129.594] SetEndOfFile (hFile=0x1e8) returned 1 [0129.600] SetEndOfFile (hFile=0x1e8) returned 1 [0129.605] SetEndOfFile (hFile=0x1e8) returned 1 [0129.627] SetEndOfFile (hFile=0x1e8) returned 1 [0129.638] SetEndOfFile (hFile=0x1e8) returned 1 [0129.653] SetEndOfFile (hFile=0x1e8) returned 1 [0129.658] SetEndOfFile (hFile=0x1e8) returned 1 [0129.667] SetEndOfFile (hFile=0x1e8) returned 1 [0129.691] SetEndOfFile (hFile=0x1e8) returned 1 [0129.696] SetEndOfFile (hFile=0x1e8) returned 1 [0129.703] SetEndOfFile (hFile=0x1e8) returned 1 [0129.711] SetEndOfFile (hFile=0x1e8) returned 1 [0129.716] SetEndOfFile (hFile=0x1e8) returned 1 [0129.721] SetEndOfFile (hFile=0x1e8) returned 1 [0129.727] SetEndOfFile (hFile=0x1e8) returned 1 [0129.732] SetEndOfFile (hFile=0x1e8) returned 1 [0129.742] SetEndOfFile (hFile=0x1e8) returned 1 [0129.748] SetEndOfFile (hFile=0x1e8) returned 1 [0129.753] SetEndOfFile (hFile=0x1e8) returned 1 [0129.759] SetEndOfFile (hFile=0x1e8) returned 1 [0129.764] SetEndOfFile (hFile=0x1e8) returned 1 [0129.770] SetEndOfFile (hFile=0x1e8) returned 1 [0129.775] SetEndOfFile (hFile=0x1e8) returned 1 [0129.794] SetEndOfFile (hFile=0x1e8) returned 1 [0129.801] SetEndOfFile (hFile=0x1e8) returned 1 [0129.810] SetEndOfFile (hFile=0x1e8) returned 1 [0129.817] SetEndOfFile (hFile=0x1e8) returned 1 [0129.824] SetEndOfFile (hFile=0x1e8) returned 1 [0129.831] SetEndOfFile (hFile=0x1e8) returned 1 [0129.853] SetEndOfFile (hFile=0x1e8) returned 1 [0129.859] SetEndOfFile (hFile=0x1e8) returned 1 [0129.865] SetEndOfFile (hFile=0x1e8) returned 1 [0129.872] SetEndOfFile (hFile=0x1e8) returned 1 [0129.881] SetEndOfFile (hFile=0x1e8) returned 1 [0129.889] SetEndOfFile (hFile=0x1e8) returned 1 [0129.914] SetEndOfFile (hFile=0x1e8) returned 1 [0129.921] SetEndOfFile (hFile=0x1e8) returned 1 [0129.927] SetEndOfFile (hFile=0x1e8) returned 1 [0129.935] SetEndOfFile (hFile=0x1e8) returned 1 [0129.941] SetEndOfFile (hFile=0x1e8) returned 1 [0129.947] SetEndOfFile (hFile=0x1e8) returned 1 [0129.955] SetEndOfFile (hFile=0x1e8) returned 1 [0129.962] SetEndOfFile (hFile=0x1e8) returned 1 [0129.968] SetEndOfFile (hFile=0x1e8) returned 1 [0129.989] SetEndOfFile (hFile=0x1e8) returned 1 [0129.996] SetEndOfFile (hFile=0x1e8) returned 1 [0130.005] SetEndOfFile (hFile=0x1e8) returned 1 [0130.011] SetEndOfFile (hFile=0x1e8) returned 1 [0130.024] SetEndOfFile (hFile=0x1e8) returned 1 [0130.031] SetEndOfFile (hFile=0x1e8) returned 1 [0130.037] SetEndOfFile (hFile=0x1e8) returned 1 [0130.046] SetEndOfFile (hFile=0x1e8) returned 1 [0130.051] SetEndOfFile (hFile=0x1e8) returned 1 [0130.057] SetEndOfFile (hFile=0x1e8) returned 1 [0130.068] SetEndOfFile (hFile=0x1e8) returned 1 [0130.075] SetEndOfFile (hFile=0x1e8) returned 1 [0130.082] SetEndOfFile (hFile=0x1e8) returned 1 [0130.087] SetEndOfFile (hFile=0x1e8) returned 1 [0130.094] SetEndOfFile (hFile=0x1e8) returned 1 [0130.102] SetEndOfFile (hFile=0x1e8) returned 1 [0130.109] SetEndOfFile (hFile=0x1e8) returned 1 [0130.115] SetEndOfFile (hFile=0x1e8) returned 1 [0130.129] ReadFile (in: hFile=0x178, lpBuffer=0x26b3294, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fc270, lpOverlapped=0x0 | out: lpBuffer=0x26b3294*, lpNumberOfBytesRead=0x2fc270*=0x33e, lpOverlapped=0x0) returned 1 [0130.141] SetEndOfFile (hFile=0x1e8) returned 1 [0130.147] SetEndOfFile (hFile=0x1e8) returned 1 [0130.154] SetEndOfFile (hFile=0x1e8) returned 1 [0130.165] SetEndOfFile (hFile=0x1e8) returned 1 [0130.174] SetEndOfFile (hFile=0x1e8) returned 1 [0130.180] SetEndOfFile (hFile=0x1e8) returned 1 [0130.188] SetEndOfFile (hFile=0x1e8) returned 1 [0130.194] SetEndOfFile (hFile=0x1e8) returned 1 [0130.199] SetEndOfFile (hFile=0x1e8) returned 1 [0130.210] SetEndOfFile (hFile=0x1e8) returned 1 [0130.215] SetEndOfFile (hFile=0x1e8) returned 1 [0130.220] SetEndOfFile (hFile=0x1e8) returned 1 [0130.226] SetEndOfFile (hFile=0x1e8) returned 1 [0130.231] SetEndOfFile (hFile=0x1e8) returned 1 [0130.236] SetEndOfFile (hFile=0x1e8) returned 1 [0130.241] SetEndOfFile (hFile=0x1e8) returned 1 [0130.246] SetEndOfFile (hFile=0x1e8) returned 1 [0130.257] SetEndOfFile (hFile=0x1e8) returned 1 [0130.262] SetEndOfFile (hFile=0x1e8) returned 1 [0130.267] SetEndOfFile (hFile=0x1e8) returned 1 [0130.272] SetEndOfFile (hFile=0x1e8) returned 1 [0130.277] SetEndOfFile (hFile=0x1e8) returned 1 [0130.283] SetEndOfFile (hFile=0x1e8) returned 1 [0130.288] SetEndOfFile (hFile=0x1e8) returned 1 [0130.292] SetEndOfFile (hFile=0x1e8) returned 1 [0130.297] SetEndOfFile (hFile=0x1e8) returned 1 [0130.302] SetEndOfFile (hFile=0x1e8) returned 1 [0130.307] SetEndOfFile (hFile=0x1e8) returned 1 [0130.313] SetEndOfFile (hFile=0x1e8) returned 1 [0130.317] SetEndOfFile (hFile=0x1e8) returned 1 [0130.323] SetEndOfFile (hFile=0x1e8) returned 1 [0130.328] SetEndOfFile (hFile=0x1e8) returned 1 [0130.333] SetEndOfFile (hFile=0x1e8) returned 1 [0130.344] SetEndOfFile (hFile=0x1e8) returned 1 [0130.352] SetEndOfFile (hFile=0x1e8) returned 1 [0130.358] SetEndOfFile (hFile=0x1e8) returned 1 [0130.369] SetEndOfFile (hFile=0x1e8) returned 1 [0130.377] SetEndOfFile (hFile=0x1e8) returned 1 [0130.396] SetEndOfFile (hFile=0x1e8) returned 1 [0130.407] SetEndOfFile (hFile=0x1e8) returned 1 [0130.415] SetEndOfFile (hFile=0x1e8) returned 1 [0130.422] SetEndOfFile (hFile=0x1e8) returned 1 [0130.428] SetEndOfFile (hFile=0x1e8) returned 1 [0130.438] SetEndOfFile (hFile=0x1e8) returned 1 [0130.448] SetEndOfFile (hFile=0x1e8) returned 1 [0130.454] SetEndOfFile (hFile=0x1e8) returned 1 [0130.460] SetEndOfFile (hFile=0x1e8) returned 1 [0130.477] SetEndOfFile (hFile=0x1e8) returned 1 [0130.486] SetEndOfFile (hFile=0x1e8) returned 1 [0130.504] SetEndOfFile (hFile=0x1e8) returned 1 [0130.511] SetEndOfFile (hFile=0x1e8) returned 1 [0130.520] SetEndOfFile (hFile=0x1e8) returned 1 [0130.527] SetEndOfFile (hFile=0x1e8) returned 1 [0130.537] SetEndOfFile (hFile=0x1e8) returned 1 [0130.543] SetEndOfFile (hFile=0x1e8) returned 1 [0130.554] SetEndOfFile (hFile=0x1e8) returned 1 [0130.563] SetEndOfFile (hFile=0x1e8) returned 1 [0130.569] SetEndOfFile (hFile=0x1e8) returned 1 [0130.575] SetEndOfFile (hFile=0x1e8) returned 1 [0130.581] SetEndOfFile (hFile=0x1e8) returned 1 [0130.588] SetEndOfFile (hFile=0x1e8) returned 1 [0130.596] SetEndOfFile (hFile=0x1e8) returned 1 [0130.602] SetEndOfFile (hFile=0x1e8) returned 1 [0130.628] SetEndOfFile (hFile=0x1e8) returned 1 [0130.634] SetEndOfFile (hFile=0x1e8) returned 1 [0130.640] SetEndOfFile (hFile=0x1e8) returned 1 [0130.647] SetEndOfFile (hFile=0x1e8) returned 1 [0130.653] SetEndOfFile (hFile=0x1e8) returned 1 [0130.663] SetEndOfFile (hFile=0x1e8) returned 1 [0130.668] SetEndOfFile (hFile=0x1e8) returned 1 [0130.674] SetEndOfFile (hFile=0x1e8) returned 1 [0130.680] SetEndOfFile (hFile=0x1e8) returned 1 [0130.686] SetEndOfFile (hFile=0x1e8) returned 1 [0130.693] SetEndOfFile (hFile=0x1e8) returned 1 [0130.703] SetEndOfFile (hFile=0x1e8) returned 1 [0130.709] SetEndOfFile (hFile=0x1e8) returned 1 [0130.716] SetEndOfFile (hFile=0x1e8) returned 1 [0130.722] SetEndOfFile (hFile=0x1e8) returned 1 [0130.728] SetEndOfFile (hFile=0x1e8) returned 1 [0130.737] SetEndOfFile (hFile=0x1e8) returned 1 [0130.743] SetEndOfFile (hFile=0x1e8) returned 1 [0130.749] SetEndOfFile (hFile=0x1e8) returned 1 [0130.756] SetEndOfFile (hFile=0x1e8) returned 1 [0130.762] SetEndOfFile (hFile=0x1e8) returned 1 [0130.767] SetEndOfFile (hFile=0x1e8) returned 1 [0130.774] SetEndOfFile (hFile=0x1e8) returned 1 [0130.780] SetEndOfFile (hFile=0x1e8) returned 1 [0130.785] SetEndOfFile (hFile=0x1e8) returned 1 [0130.792] SetEndOfFile (hFile=0x1e8) returned 1 [0130.799] SetEndOfFile (hFile=0x1e8) returned 1 [0130.804] SetEndOfFile (hFile=0x1e8) returned 1 [0130.810] SetEndOfFile (hFile=0x1e8) returned 1 [0130.815] SetEndOfFile (hFile=0x1e8) returned 1 [0130.820] SetEndOfFile (hFile=0x1e8) returned 1 [0130.829] SetEndOfFile (hFile=0x1e8) returned 1 [0130.836] SetEndOfFile (hFile=0x1e8) returned 1 [0130.842] SetEndOfFile (hFile=0x1e8) returned 1 [0130.847] SetEndOfFile (hFile=0x1e8) returned 1 [0130.854] SetEndOfFile (hFile=0x1e8) returned 1 [0130.864] SetEndOfFile (hFile=0x1e8) returned 1 [0130.870] SetEndOfFile (hFile=0x1e8) returned 1 [0130.886] SetEndOfFile (hFile=0x1e8) returned 1 [0130.899] SetEndOfFile (hFile=0x1e8) returned 1 [0130.907] SetEndOfFile (hFile=0x1e8) returned 1 [0130.929] SetEndOfFile (hFile=0x1e8) returned 1 [0130.950] SetEndOfFile (hFile=0x1e8) returned 1 [0130.956] SetEndOfFile (hFile=0x1e8) returned 1 [0130.964] SetEndOfFile (hFile=0x1e8) returned 1 [0130.971] SetEndOfFile (hFile=0x1e8) returned 1 [0130.976] SetEndOfFile (hFile=0x1e8) returned 1 [0130.995] SetEndOfFile (hFile=0x1e8) returned 1 [0131.001] SetEndOfFile (hFile=0x1e8) returned 1 [0131.007] SetEndOfFile (hFile=0x1e8) returned 1 [0131.013] SetEndOfFile (hFile=0x1e8) returned 1 [0131.018] SetEndOfFile (hFile=0x1e8) returned 1 [0131.027] SetEndOfFile (hFile=0x1e8) returned 1 [0131.035] SetEndOfFile (hFile=0x1e8) returned 1 [0131.042] SetEndOfFile (hFile=0x1e8) returned 1 [0131.049] SetEndOfFile (hFile=0x1e8) returned 1 [0131.054] SetEndOfFile (hFile=0x1e8) returned 1 [0131.066] SetEndOfFile (hFile=0x1e8) returned 1 [0131.073] SetEndOfFile (hFile=0x1e8) returned 1 [0131.096] SetEndOfFile (hFile=0x1e8) returned 1 [0131.106] SetEndOfFile (hFile=0x1e8) returned 1 [0131.113] SetEndOfFile (hFile=0x1e8) returned 1 [0131.121] SetEndOfFile (hFile=0x1e8) returned 1 [0131.127] SetEndOfFile (hFile=0x1e8) returned 1 [0131.132] SetEndOfFile (hFile=0x1e8) returned 1 [0131.137] SetEndOfFile (hFile=0x1e8) returned 1 [0131.143] SetEndOfFile (hFile=0x1e8) returned 1 [0131.148] SetEndOfFile (hFile=0x1e8) returned 1 [0131.153] SetEndOfFile (hFile=0x1e8) returned 1 [0131.158] SetEndOfFile (hFile=0x1e8) returned 1 [0131.165] SetEndOfFile (hFile=0x1e8) returned 1 [0131.172] SetEndOfFile (hFile=0x1e8) returned 1 [0131.177] SetEndOfFile (hFile=0x1e8) returned 1 [0131.181] SetEndOfFile (hFile=0x1e8) returned 1 [0131.187] SetEndOfFile (hFile=0x1e8) returned 1 [0131.191] SetEndOfFile (hFile=0x1e8) returned 1 [0131.196] SetEndOfFile (hFile=0x1e8) returned 1 [0131.201] SetEndOfFile (hFile=0x1e8) returned 1 [0131.207] SetEndOfFile (hFile=0x1e8) returned 1 [0131.212] SetEndOfFile (hFile=0x1e8) returned 1 [0131.218] SetEndOfFile (hFile=0x1e8) returned 1 [0131.224] SetEndOfFile (hFile=0x1e8) returned 1 [0131.234] SetEndOfFile (hFile=0x1e8) returned 1 [0131.239] SetEndOfFile (hFile=0x1e8) returned 1 [0131.247] SetEndOfFile (hFile=0x1e8) returned 1 [0131.255] SetEndOfFile (hFile=0x1e8) returned 1 [0131.260] SetEndOfFile (hFile=0x1e8) returned 1 [0131.269] SetEndOfFile (hFile=0x1e8) returned 1 [0131.276] SetEndOfFile (hFile=0x1e8) returned 1 [0131.285] SetEndOfFile (hFile=0x1e8) returned 1 [0131.292] SetEndOfFile (hFile=0x1e8) returned 1 [0131.297] SetEndOfFile (hFile=0x1e8) returned 1 [0131.303] SetEndOfFile (hFile=0x1e8) returned 1 [0131.309] SetEndOfFile (hFile=0x1e8) returned 1 [0131.314] SetEndOfFile (hFile=0x1e8) returned 1 [0131.318] SetEndOfFile (hFile=0x1e8) returned 1 [0131.323] SetEndOfFile (hFile=0x1e8) returned 1 [0131.328] SetEndOfFile (hFile=0x1e8) returned 1 [0131.334] SetEndOfFile (hFile=0x1e8) returned 1 [0131.338] SetEndOfFile (hFile=0x1e8) returned 1 [0131.344] SetEndOfFile (hFile=0x1e8) returned 1 [0131.350] SetEndOfFile (hFile=0x1e8) returned 1 [0131.354] SetEndOfFile (hFile=0x1e8) returned 1 [0131.360] SetEndOfFile (hFile=0x1e8) returned 1 [0131.365] SetEndOfFile (hFile=0x1e8) returned 1 [0131.372] SetEndOfFile (hFile=0x1e8) returned 1 [0131.379] SetEndOfFile (hFile=0x1e8) returned 1 [0131.387] SetEndOfFile (hFile=0x1e8) returned 1 [0131.392] SetEndOfFile (hFile=0x1e8) returned 1 [0131.398] SetEndOfFile (hFile=0x1e8) returned 1 [0131.758] SetEndOfFile (hFile=0x1e8) returned 1 [0131.765] SetEndOfFile (hFile=0x1e8) returned 1 [0131.774] SetEndOfFile (hFile=0x1e8) returned 1 [0131.891] SetEndOfFile (hFile=0x1e8) returned 1 [0131.898] SetEndOfFile (hFile=0x1e8) returned 1 [0131.906] SetEndOfFile (hFile=0x1e8) returned 1 [0131.913] SetEndOfFile (hFile=0x1e8) returned 1 [0131.919] SetEndOfFile (hFile=0x1e8) returned 1 [0131.925] SetEndOfFile (hFile=0x1e8) returned 1 [0131.931] SetEndOfFile (hFile=0x1e8) returned 1 [0131.968] SetEndOfFile (hFile=0x1e8) returned 1 [0131.974] SetEndOfFile (hFile=0x1e8) returned 1 [0131.982] SetEndOfFile (hFile=0x1e8) returned 1 [0131.989] SetEndOfFile (hFile=0x1e8) returned 1 [0132.035] SetEndOfFile (hFile=0x1e8) returned 1 [0132.042] SetEndOfFile (hFile=0x1e8) returned 1 [0132.049] SetEndOfFile (hFile=0x1e8) returned 1 [0132.055] SetEndOfFile (hFile=0x1e8) returned 1 [0132.062] SetEndOfFile (hFile=0x1e8) returned 1 [0132.073] SetEndOfFile (hFile=0x1e8) returned 1 [0132.080] SetEndOfFile (hFile=0x1e8) returned 1 [0132.086] SetEndOfFile (hFile=0x1e8) returned 1 [0132.094] SetEndOfFile (hFile=0x1e8) returned 1 [0132.104] SetEndOfFile (hFile=0x1e8) returned 1 [0132.138] SetEndOfFile (hFile=0x1e8) returned 1 [0132.145] SetEndOfFile (hFile=0x1e8) returned 1 [0132.150] SetEndOfFile (hFile=0x1e8) returned 1 [0132.155] SetEndOfFile (hFile=0x1e8) returned 1 [0132.185] SetEndOfFile (hFile=0x1e8) returned 1 [0132.187] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x2fc2cc | out: lpFileSizeHigh=0x2fc2cc*=0x0) returned 0x33e [0132.187] ReadFile (in: hFile=0x178, lpBuffer=0x2688f20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fc270, lpOverlapped=0x0 | out: lpBuffer=0x2688f20*, lpNumberOfBytesRead=0x2fc270*=0x33e, lpOverlapped=0x0) returned 1 [0132.193] SetEndOfFile (hFile=0x1e8) returned 1 [0132.194] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x2fc2cc | out: lpFileSizeHigh=0x2fc2cc*=0x0) returned 0x33e [0132.194] ReadFile (in: hFile=0x178, lpBuffer=0x269cf90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fc270, lpOverlapped=0x0 | out: lpBuffer=0x269cf90*, lpNumberOfBytesRead=0x2fc270*=0x33e, lpOverlapped=0x0) returned 1 [0132.199] SetEndOfFile (hFile=0x1e8) returned 1 [0132.205] SetEndOfFile (hFile=0x1e8) returned 1 [0132.210] SetEndOfFile (hFile=0x1e8) returned 1 [0132.211] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x2fc2cc | out: lpFileSizeHigh=0x2fc2cc*=0x0) returned 0x33e [0132.211] ReadFile (in: hFile=0x178, lpBuffer=0x26cd38c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fc270, lpOverlapped=0x0 | out: lpBuffer=0x26cd38c*, lpNumberOfBytesRead=0x2fc270*=0x33e, lpOverlapped=0x0) returned 1 [0132.223] SetEndOfFile (hFile=0x1e8) returned 1 [0132.224] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x2fc2cc | out: lpFileSizeHigh=0x2fc2cc*=0x0) returned 0x33e [0132.225] ReadFile (in: hFile=0x178, lpBuffer=0x26e13fc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fc270, lpOverlapped=0x0 | out: lpBuffer=0x26e13fc*, lpNumberOfBytesRead=0x2fc270*=0x33e, lpOverlapped=0x0) returned 1 [0132.230] SetEndOfFile (hFile=0x1e8) returned 1 [0132.237] SetEndOfFile (hFile=0x1e8) returned 1 [0132.244] SetEndOfFile (hFile=0x1e8) returned 1 [0132.250] SetEndOfFile (hFile=0x1e8) returned 1 [0132.257] SetEndOfFile (hFile=0x1e8) returned 1 [0132.258] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x2fc2cc | out: lpFileSizeHigh=0x2fc2cc*=0x0) returned 0x33e [0132.269] SetEndOfFile (hFile=0x1e8) returned 1 [0132.276] SetEndOfFile (hFile=0x1e8) returned 1 [0132.277] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x2fc2cc | out: lpFileSizeHigh=0x2fc2cc*=0x0) returned 0x33e [0132.278] ReadFile (in: hFile=0x178, lpBuffer=0x276b5dc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fc270, lpOverlapped=0x0 | out: lpBuffer=0x276b5dc*, lpNumberOfBytesRead=0x2fc270*=0x33e, lpOverlapped=0x0) returned 1 [0132.286] SetEndOfFile (hFile=0x1e8) returned 1 [0132.293] SetEndOfFile (hFile=0x1e8) returned 1 [0132.299] SetEndOfFile (hFile=0x1e8) returned 1 [0132.300] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x2fc2cc | out: lpFileSizeHigh=0x2fc2cc*=0x0) returned 0x33e [0132.300] ReadFile (in: hFile=0x178, lpBuffer=0x27b165c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fc270, lpOverlapped=0x0 | out: lpBuffer=0x27b165c*, lpNumberOfBytesRead=0x2fc270*=0x33e, lpOverlapped=0x0) returned 1 [0132.321] SetEndOfFile (hFile=0x1e8) returned 1 [0132.323] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x2fc2cc | out: lpFileSizeHigh=0x2fc2cc*=0x0) returned 0x33e [0132.323] ReadFile (in: hFile=0x178, lpBuffer=0x27cb2bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fc270, lpOverlapped=0x0 | out: lpBuffer=0x27cb2bc*, lpNumberOfBytesRead=0x2fc270*=0x33e, lpOverlapped=0x0) returned 1 [0132.329] SetEndOfFile (hFile=0x1e8) returned 1 [0132.331] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x2fc2cc | out: lpFileSizeHigh=0x2fc2cc*=0x0) returned 0x33e [0132.331] ReadFile (in: hFile=0x178, lpBuffer=0x27df32c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fc270, lpOverlapped=0x0 | out: lpBuffer=0x27df32c*, lpNumberOfBytesRead=0x2fc270*=0x33e, lpOverlapped=0x0) returned 1 [0132.336] SetEndOfFile (hFile=0x1e8) returned 1 [0132.344] SetEndOfFile (hFile=0x1e8) returned 1 [0132.351] SetEndOfFile (hFile=0x1e8) returned 1 [0132.363] SetEndOfFile (hFile=0x1e8) returned 1 [0132.371] SetEndOfFile (hFile=0x1e8) returned 1 [0132.372] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x2fc2cc | out: lpFileSizeHigh=0x2fc2cc*=0x0) returned 0x33e [0132.378] SetEndOfFile (hFile=0x1e8) returned 1 [0132.379] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x2fc2cc | out: lpFileSizeHigh=0x2fc2cc*=0x0) returned 0x33e [0132.384] SetEndOfFile (hFile=0x1e8) returned 1 [0132.385] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x2fc2cc | out: lpFileSizeHigh=0x2fc2cc*=0x0) returned 0x33e [0132.387] ReadFile (in: hFile=0x178, lpBuffer=0x28694fc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fc270, lpOverlapped=0x0 | out: lpBuffer=0x28694fc*, lpNumberOfBytesRead=0x2fc270*=0x33e, lpOverlapped=0x0) returned 1 [0132.392] SetEndOfFile (hFile=0x1e8) returned 1 [0132.393] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x2fc808 | out: lpFileSizeHigh=0x2fc808*=0x0) returned 0x33e [0132.393] ReadFile (in: hFile=0x178, lpBuffer=0x2877690, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fc7ac, lpOverlapped=0x0 | out: lpBuffer=0x2877690*, lpNumberOfBytesRead=0x2fc7ac*=0x33e, lpOverlapped=0x0) returned 1 [0132.400] SetEndOfFile (hFile=0x1e8) returned 1 [0132.412] SetEndOfFile (hFile=0x1e8) returned 1 [0132.418] SetEndOfFile (hFile=0x1e8) returned 1 [0132.426] SetEndOfFile (hFile=0x1e8) returned 1 [0132.432] SetEndOfFile (hFile=0x1e8) returned 1 [0132.438] SetEndOfFile (hFile=0x1e8) returned 1 [0132.445] SetEndOfFile (hFile=0x1e8) returned 1 [0132.452] SetEndOfFile (hFile=0x1e8) returned 1 [0132.458] SetEndOfFile (hFile=0x1e8) returned 1 [0132.467] SetEndOfFile (hFile=0x1e8) returned 1 [0132.474] SetEndOfFile (hFile=0x1e8) returned 1 [0132.481] SetEndOfFile (hFile=0x1e8) returned 1 [0132.488] SetEndOfFile (hFile=0x1e8) returned 1 [0132.494] SetEndOfFile (hFile=0x1e8) returned 1 [0132.503] SetEndOfFile (hFile=0x1e8) returned 1 [0132.516] SetEndOfFile (hFile=0x1e8) returned 1 [0132.522] SetEndOfFile (hFile=0x1e8) returned 1 [0132.528] SetEndOfFile (hFile=0x1e8) returned 1 [0132.536] SetEndOfFile (hFile=0x1e8) returned 1 [0132.547] GetFileType (hFile=0x178) returned 0x1 [0132.549] SetEndOfFile (hFile=0x1e8) returned 1 [0132.559] SetEndOfFile (hFile=0x1e8) returned 1 [0132.566] SetEndOfFile (hFile=0x1e8) returned 1 [0132.572] SetEndOfFile (hFile=0x1e8) returned 1 [0132.586] SetEndOfFile (hFile=0x1e8) returned 1 [0132.592] SetEndOfFile (hFile=0x1e8) returned 1 [0132.601] SetEndOfFile (hFile=0x1e8) returned 1 [0132.683] GetFileType (hFile=0x178) returned 0x1 [0132.686] SetEndOfFile (hFile=0x1e8) returned 1 [0132.694] SetEndOfFile (hFile=0x1e8) returned 1 [0132.703] SetEndOfFile (hFile=0x1e8) returned 1 [0132.710] SetEndOfFile (hFile=0x1e8) returned 1 [0132.717] SetEndOfFile (hFile=0x1e8) returned 1 [0132.727] SetEndOfFile (hFile=0x1e8) returned 1 [0132.738] SetEndOfFile (hFile=0x1e8) returned 1 [0132.750] SetEndOfFile (hFile=0x1e8) returned 1 [0132.759] SetEndOfFile (hFile=0x1e8) returned 1 [0132.766] SetEndOfFile (hFile=0x1e8) returned 1 [0132.772] SetEndOfFile (hFile=0x1e8) returned 1 [0132.779] SetEndOfFile (hFile=0x1e8) returned 1 [0132.786] SetEndOfFile (hFile=0x1e8) returned 1 [0132.821] SetEndOfFile (hFile=0x1e8) returned 1 [0132.828] SetEndOfFile (hFile=0x1e8) returned 1 [0132.836] SetEndOfFile (hFile=0x1e8) returned 1 [0132.843] SetEndOfFile (hFile=0x1e8) returned 1 [0132.849] SetEndOfFile (hFile=0x1e8) returned 1 [0132.855] SetEndOfFile (hFile=0x1e8) returned 1 [0132.873] SetEndOfFile (hFile=0x1e8) returned 1 [0132.879] SetEndOfFile (hFile=0x1e8) returned 1 [0132.886] SetEndOfFile (hFile=0x1e8) returned 1 [0132.892] SetEndOfFile (hFile=0x1e8) returned 1 [0132.898] SetEndOfFile (hFile=0x1e8) returned 1 [0132.907] SetEndOfFile (hFile=0x1e8) returned 1 [0132.914] SetEndOfFile (hFile=0x1e8) returned 1 [0132.919] SetEndOfFile (hFile=0x1e8) returned 1 [0132.928] SetEndOfFile (hFile=0x1e8) returned 1 [0132.934] SetEndOfFile (hFile=0x1e8) returned 1 [0132.940] SetEndOfFile (hFile=0x1e8) returned 1 [0132.954] SetEndOfFile (hFile=0x1e8) returned 1 [0132.961] SetEndOfFile (hFile=0x1e8) returned 1 [0132.973] SetEndOfFile (hFile=0x1e8) returned 1 [0132.981] SetEndOfFile (hFile=0x1e8) returned 1 [0132.987] SetEndOfFile (hFile=0x1e8) returned 1 [0132.993] SetEndOfFile (hFile=0x1e8) returned 1 [0133.013] SetEndOfFile (hFile=0x1e8) returned 1 [0133.019] SetEndOfFile (hFile=0x1e8) returned 1 [0133.025] SetEndOfFile (hFile=0x1e8) returned 1 [0133.031] SetEndOfFile (hFile=0x1e8) returned 1 [0133.036] SetEndOfFile (hFile=0x1e8) returned 1 [0133.044] SetEndOfFile (hFile=0x1e8) returned 1 [0133.050] SetEndOfFile (hFile=0x1e8) returned 1 [0133.058] SetEndOfFile (hFile=0x1e8) returned 1 [0133.065] SetEndOfFile (hFile=0x1e8) returned 1 [0133.075] SetEndOfFile (hFile=0x1e8) returned 1 [0133.122] SetEndOfFile (hFile=0x1e8) returned 1 [0133.128] SetEndOfFile (hFile=0x1e8) returned 1 [0133.135] SetEndOfFile (hFile=0x1e8) returned 1 [0133.145] SetEndOfFile (hFile=0x1e8) returned 1 [0133.150] SetEndOfFile (hFile=0x1e8) returned 1 [0133.163] SetEndOfFile (hFile=0x1e8) returned 1 [0133.170] SetEndOfFile (hFile=0x1e8) returned 1 [0133.176] SetEndOfFile (hFile=0x1e8) returned 1 [0133.182] SetEndOfFile (hFile=0x1e8) returned 1 [0133.189] SetEndOfFile (hFile=0x1e8) returned 1 [0133.195] SetEndOfFile (hFile=0x1e8) returned 1 [0133.207] SetEndOfFile (hFile=0x1e8) returned 1 [0133.214] SetEndOfFile (hFile=0x1e8) returned 1 [0133.220] SetEndOfFile (hFile=0x1e8) returned 1 [0133.226] SetEndOfFile (hFile=0x1e8) returned 1 [0133.232] SetEndOfFile (hFile=0x1e8) returned 1 [0133.237] SetEndOfFile (hFile=0x1e8) returned 1 [0133.243] SetEndOfFile (hFile=0x1e8) returned 1 [0133.255] SetEndOfFile (hFile=0x1e8) returned 1 [0133.263] SetEndOfFile (hFile=0x1e8) returned 1 [0133.270] SetEndOfFile (hFile=0x1e8) returned 1 [0133.278] SetEndOfFile (hFile=0x1e8) returned 1 [0133.285] SetEndOfFile (hFile=0x1e8) returned 1 [0133.295] SetEndOfFile (hFile=0x1e8) returned 1 [0133.300] SetEndOfFile (hFile=0x1e8) returned 1 [0133.311] SetEndOfFile (hFile=0x1e8) returned 1 [0133.316] SetEndOfFile (hFile=0x1e8) returned 1 [0133.324] SetEndOfFile (hFile=0x1e8) returned 1 [0133.330] SetEndOfFile (hFile=0x1e8) returned 1 [0133.353] SetEndOfFile (hFile=0x1e8) returned 1 [0133.360] SetEndOfFile (hFile=0x1e8) returned 1 [0133.366] SetEndOfFile (hFile=0x1e8) returned 1 [0133.372] SetEndOfFile (hFile=0x1e8) returned 1 [0133.379] SetEndOfFile (hFile=0x1e8) returned 1 [0133.396] SetEndOfFile (hFile=0x1e8) returned 1 [0133.419] SetEndOfFile (hFile=0x1e8) returned 1 [0133.426] SetEndOfFile (hFile=0x1e8) returned 1 [0133.431] SetEndOfFile (hFile=0x1e8) returned 1 [0133.436] SetEndOfFile (hFile=0x1e8) returned 1 [0133.441] SetEndOfFile (hFile=0x1e8) returned 1 [0133.446] SetEndOfFile (hFile=0x1e8) returned 1 [0133.495] SetEndOfFile (hFile=0x1e8) returned 1 [0133.502] SetEndOfFile (hFile=0x1e8) returned 1 [0133.508] SetEndOfFile (hFile=0x1e8) returned 1 [0133.513] SetEndOfFile (hFile=0x1e8) returned 1 [0133.518] SetEndOfFile (hFile=0x1e8) returned 1 [0133.523] SetEndOfFile (hFile=0x1e8) returned 1 [0133.573] SetEndOfFile (hFile=0x1e8) returned 1 [0133.581] SetEndOfFile (hFile=0x1e8) returned 1 [0133.588] SetEndOfFile (hFile=0x1e8) returned 1 [0133.597] SetEndOfFile (hFile=0x1e8) returned 1 [0133.679] SetEndOfFile (hFile=0x1e8) returned 1 [0133.685] SetEndOfFile (hFile=0x1e8) returned 1 [0133.691] SetEndOfFile (hFile=0x1e8) returned 1 [0133.700] SetEndOfFile (hFile=0x1e8) returned 1 [0133.706] SetEndOfFile (hFile=0x1e8) returned 1 [0133.717] SetEndOfFile (hFile=0x1e8) returned 1 [0133.724] SetEndOfFile (hFile=0x1e8) returned 1 [0133.737] SetEndOfFile (hFile=0x1e8) returned 1 [0133.743] SetEndOfFile (hFile=0x1e8) returned 1 [0133.749] SetEndOfFile (hFile=0x1e8) returned 1 [0133.754] SetEndOfFile (hFile=0x1e8) returned 1 [0133.764] SetEndOfFile (hFile=0x1e8) returned 1 [0133.769] SetEndOfFile (hFile=0x1e8) returned 1 [0133.776] SetEndOfFile (hFile=0x1e8) returned 1 [0133.782] SetEndOfFile (hFile=0x1e8) returned 1 [0133.787] SetEndOfFile (hFile=0x1e8) returned 1 [0133.794] SetEndOfFile (hFile=0x1e8) returned 1 [0133.800] SetEndOfFile (hFile=0x1e8) returned 1 [0133.807] SetEndOfFile (hFile=0x1e8) returned 1 [0133.815] SetEndOfFile (hFile=0x1e8) returned 1 [0133.822] SetEndOfFile (hFile=0x1e8) returned 1 [0133.827] SetEndOfFile (hFile=0x1e8) returned 1 [0133.834] SetEndOfFile (hFile=0x1e8) returned 1 [0133.840] SetEndOfFile (hFile=0x1e8) returned 1 [0133.850] SetEndOfFile (hFile=0x1e8) returned 1 [0133.858] SetEndOfFile (hFile=0x1e8) returned 1 [0133.865] SetEndOfFile (hFile=0x1e8) returned 1 [0133.871] SetEndOfFile (hFile=0x1e8) returned 1 [0133.880] SetEndOfFile (hFile=0x1e8) returned 1 [0133.888] SetEndOfFile (hFile=0x1e8) returned 1 [0133.894] SetEndOfFile (hFile=0x1e8) returned 1 [0133.900] SetEndOfFile (hFile=0x1e8) returned 1 [0133.905] SetEndOfFile (hFile=0x1e8) returned 1 [0133.911] SetEndOfFile (hFile=0x1e8) returned 1 [0133.917] SetEndOfFile (hFile=0x1e8) returned 1 [0133.924] SetEndOfFile (hFile=0x1e8) returned 1 [0133.931] SetEndOfFile (hFile=0x1e8) returned 1 [0133.936] SetEndOfFile (hFile=0x1e8) returned 1 [0133.943] SetEndOfFile (hFile=0x1e8) returned 1 [0133.951] SetEndOfFile (hFile=0x1e8) returned 1 [0133.956] SetEndOfFile (hFile=0x1e8) returned 1 [0133.965] SetEndOfFile (hFile=0x1e8) returned 1 [0133.970] SetEndOfFile (hFile=0x1e8) returned 1 [0133.977] SetEndOfFile (hFile=0x1e8) returned 1 [0133.983] SetEndOfFile (hFile=0x1e8) returned 1 [0133.990] SetEndOfFile (hFile=0x1e8) returned 1 [0134.011] SetEndOfFile (hFile=0x1e8) returned 1 [0134.017] SetEndOfFile (hFile=0x1e8) returned 1 [0134.024] SetEndOfFile (hFile=0x1e8) returned 1 [0134.030] SetEndOfFile (hFile=0x1e8) returned 1 [0134.042] SetEndOfFile (hFile=0x1e8) returned 1 [0134.057] SetEndOfFile (hFile=0x1e8) returned 1 [0134.063] SetEndOfFile (hFile=0x1e8) returned 1 [0134.069] SetEndOfFile (hFile=0x1e8) returned 1 [0134.075] SetEndOfFile (hFile=0x1e8) returned 1 [0134.083] SetEndOfFile (hFile=0x1e8) returned 1 [0134.092] SetEndOfFile (hFile=0x1e8) returned 1 [0134.098] SetEndOfFile (hFile=0x1e8) returned 1 [0134.107] SetEndOfFile (hFile=0x1e8) returned 1 [0134.114] SetEndOfFile (hFile=0x1e8) returned 1 [0134.119] SetEndOfFile (hFile=0x1e8) returned 1 [0134.126] SetEndOfFile (hFile=0x1e8) returned 1 [0134.132] SetEndOfFile (hFile=0x1e8) returned 1 [0134.138] SetEndOfFile (hFile=0x1e8) returned 1 [0134.147] SetEndOfFile (hFile=0x1e8) returned 1 [0134.154] SetEndOfFile (hFile=0x1e8) returned 1 [0134.159] SetEndOfFile (hFile=0x1e8) returned 1 [0134.167] SetEndOfFile (hFile=0x1e8) returned 1 [0134.173] SetEndOfFile (hFile=0x1e8) returned 1 [0134.179] SetEndOfFile (hFile=0x1e8) returned 1 [0134.186] SetEndOfFile (hFile=0x1e8) returned 1 [0134.193] SetEndOfFile (hFile=0x1e8) returned 1 [0134.198] SetEndOfFile (hFile=0x1e8) returned 1 [0134.205] SetEndOfFile (hFile=0x1e8) returned 1 [0134.213] SetEndOfFile (hFile=0x1e8) returned 1 [0134.221] GetFileType (hFile=0x178) returned 0x1 [0134.223] SetEndOfFile (hFile=0x1e8) returned 1 [0134.229] SetEndOfFile (hFile=0x1e8) returned 1 [0134.234] SetEndOfFile (hFile=0x1e8) returned 1 [0134.240] SetEndOfFile (hFile=0x1e8) returned 1 [0134.246] SetEndOfFile (hFile=0x1e8) returned 1 [0134.256] SetEndOfFile (hFile=0x1e8) returned 1 [0134.262] SetEndOfFile (hFile=0x1e8) returned 1 [0134.269] SetEndOfFile (hFile=0x1e8) returned 1 [0134.276] SetEndOfFile (hFile=0x1e8) returned 1 [0134.282] SetEndOfFile (hFile=0x1e8) returned 1 [0134.288] SetEndOfFile (hFile=0x1e8) returned 1 [0134.297] SetEndOfFile (hFile=0x1e8) returned 1 [0134.304] SetEndOfFile (hFile=0x1e8) returned 1 [0134.310] SetEndOfFile (hFile=0x1e8) returned 1 [0134.316] SetEndOfFile (hFile=0x1e8) returned 1 [0134.325] SetEndOfFile (hFile=0x1e8) returned 1 [0134.330] SetEndOfFile (hFile=0x1e8) returned 1 [0134.370] SetEndOfFile (hFile=0x1e8) returned 1 [0134.384] SetEndOfFile (hFile=0x1e8) returned 1 [0134.390] SetEndOfFile (hFile=0x1e8) returned 1 [0134.398] SetEndOfFile (hFile=0x1e8) returned 1 [0134.405] SetEndOfFile (hFile=0x1e8) returned 1 [0134.411] SetEndOfFile (hFile=0x1e8) returned 1 [0134.418] SetEndOfFile (hFile=0x1e8) returned 1 [0134.424] SetEndOfFile (hFile=0x1e8) returned 1 [0134.436] SetEndOfFile (hFile=0x1e8) returned 1 [0134.446] SetEndOfFile (hFile=0x1e8) returned 1 [0134.453] SetEndOfFile (hFile=0x1e8) returned 1 [0134.461] SetEndOfFile (hFile=0x1e8) returned 1 [0134.467] SetEndOfFile (hFile=0x1e8) returned 1 [0134.480] SetEndOfFile (hFile=0x1e8) returned 1 [0134.486] SetEndOfFile (hFile=0x1e8) returned 1 [0134.492] SetEndOfFile (hFile=0x1e8) returned 1 [0134.499] SetEndOfFile (hFile=0x1e8) returned 1 [0134.504] SetEndOfFile (hFile=0x1e8) returned 1 [0134.510] SetEndOfFile (hFile=0x1e8) returned 1 [0134.515] SetEndOfFile (hFile=0x1e8) returned 1 [0134.522] SetEndOfFile (hFile=0x1e8) returned 1 [0134.528] SetEndOfFile (hFile=0x1e8) returned 1 [0134.534] SetEndOfFile (hFile=0x1e8) returned 1 [0134.541] SetEndOfFile (hFile=0x1e8) returned 1 [0134.547] SetEndOfFile (hFile=0x1e8) returned 1 [0134.552] SetEndOfFile (hFile=0x1e8) returned 1 [0134.559] SetEndOfFile (hFile=0x1e8) returned 1 [0134.564] SetEndOfFile (hFile=0x1e8) returned 1 [0134.571] SetEndOfFile (hFile=0x1e8) returned 1 [0134.577] SetEndOfFile (hFile=0x1e8) returned 1 [0134.583] SetEndOfFile (hFile=0x1e8) returned 1 [0134.591] SetEndOfFile (hFile=0x1e8) returned 1 [0134.598] SetEndOfFile (hFile=0x1e8) returned 1 [0134.622] SetEndOfFile (hFile=0x1e8) returned 1 [0134.628] SetEndOfFile (hFile=0x1e8) returned 1 [0134.637] SetEndOfFile (hFile=0x1e8) returned 1 [0134.647] SetEndOfFile (hFile=0x1e8) returned 1 [0134.654] SetEndOfFile (hFile=0x1e8) returned 1 [0134.661] SetEndOfFile (hFile=0x1e8) returned 1 [0134.671] SetEndOfFile (hFile=0x1e8) returned 1 [0134.676] SetEndOfFile (hFile=0x1e8) returned 1 [0134.681] SetEndOfFile (hFile=0x1e8) returned 1 [0134.687] SetEndOfFile (hFile=0x1e8) returned 1 [0134.693] SetEndOfFile (hFile=0x1e8) returned 1 [0134.698] SetEndOfFile (hFile=0x1e8) returned 1 [0134.703] SetEndOfFile (hFile=0x1e8) returned 1 [0134.709] SetEndOfFile (hFile=0x1e8) returned 1 [0134.714] SetEndOfFile (hFile=0x1e8) returned 1 [0134.719] SetEndOfFile (hFile=0x1e8) returned 1 [0134.724] SetEndOfFile (hFile=0x1e8) returned 1 [0134.730] SetEndOfFile (hFile=0x1e8) returned 1 [0134.734] SetEndOfFile (hFile=0x1e8) returned 1 [0134.739] SetEndOfFile (hFile=0x1e8) returned 1 [0134.744] SetEndOfFile (hFile=0x1e8) returned 1 [0134.748] SetEndOfFile (hFile=0x1e8) returned 1 [0134.754] SetEndOfFile (hFile=0x1e8) returned 1 [0134.761] SetEndOfFile (hFile=0x1e8) returned 1 [0134.766] SetEndOfFile (hFile=0x1e8) returned 1 [0134.773] SetEndOfFile (hFile=0x1e8) returned 1 [0134.780] SetEndOfFile (hFile=0x1e8) returned 1 [0134.785] SetEndOfFile (hFile=0x1e8) returned 1 [0134.795] SetEndOfFile (hFile=0x1e8) returned 1 [0134.800] SetEndOfFile (hFile=0x1e8) returned 1 [0134.805] SetEndOfFile (hFile=0x1e8) returned 1 [0134.812] SetEndOfFile (hFile=0x1e8) returned 1 [0134.817] SetEndOfFile (hFile=0x1e8) returned 1 [0134.823] SetEndOfFile (hFile=0x1e8) returned 1 [0134.828] SetEndOfFile (hFile=0x1e8) returned 1 [0134.833] SetEndOfFile (hFile=0x1e8) returned 1 [0134.838] SetEndOfFile (hFile=0x1e8) returned 1 [0134.844] SetEndOfFile (hFile=0x1e8) returned 1 [0134.850] SetEndOfFile (hFile=0x1e8) returned 1 [0134.870] SetEndOfFile (hFile=0x1e8) returned 1 [0134.875] SetEndOfFile (hFile=0x1e8) returned 1 [0134.880] SetEndOfFile (hFile=0x1e8) returned 1 [0134.886] SetEndOfFile (hFile=0x1e8) returned 1 [0134.892] SetEndOfFile (hFile=0x1e8) returned 1 [0134.899] SetEndOfFile (hFile=0x1e8) returned 1 [0134.904] SetEndOfFile (hFile=0x1e8) returned 1 [0134.909] SetEndOfFile (hFile=0x1e8) returned 1 [0134.916] SetEndOfFile (hFile=0x1e8) returned 1 [0134.921] SetEndOfFile (hFile=0x1e8) returned 1 [0134.926] SetEndOfFile (hFile=0x1e8) returned 1 [0134.936] SetEndOfFile (hFile=0x1e8) returned 1 [0134.942] SetEndOfFile (hFile=0x1e8) returned 1 [0134.947] SetEndOfFile (hFile=0x1e8) returned 1 [0134.956] SetEndOfFile (hFile=0x1e8) returned 1 [0134.964] SetEndOfFile (hFile=0x1e8) returned 1 [0134.969] SetEndOfFile (hFile=0x1e8) returned 1 [0134.977] SetEndOfFile (hFile=0x1e8) returned 1 [0134.982] SetEndOfFile (hFile=0x1e8) returned 1 [0134.987] SetEndOfFile (hFile=0x1e8) returned 1 [0134.993] SetEndOfFile (hFile=0x1e8) returned 1 [0134.998] SetEndOfFile (hFile=0x1e8) returned 1 [0135.003] SetEndOfFile (hFile=0x1e8) returned 1 [0135.010] SetEndOfFile (hFile=0x1e8) returned 1 [0135.015] SetEndOfFile (hFile=0x1e8) returned 1 [0135.028] SetEndOfFile (hFile=0x1e8) returned 1 [0135.033] SetEndOfFile (hFile=0x1e8) returned 1 [0135.039] SetEndOfFile (hFile=0x1e8) returned 1 [0135.044] SetEndOfFile (hFile=0x1e8) returned 1 [0135.049] SetEndOfFile (hFile=0x1e8) returned 1 [0135.055] SetEndOfFile (hFile=0x1e8) returned 1 [0135.068] SetEndOfFile (hFile=0x1e8) returned 1 [0135.074] SetEndOfFile (hFile=0x1e8) returned 1 [0135.082] SetEndOfFile (hFile=0x1e8) returned 1 [0135.089] SetEndOfFile (hFile=0x1e8) returned 1 [0135.094] SetEndOfFile (hFile=0x1e8) returned 1 [0135.101] SetEndOfFile (hFile=0x1e8) returned 1 [0135.107] SetEndOfFile (hFile=0x1e8) returned 1 [0135.111] SetEndOfFile (hFile=0x1e8) returned 1 [0135.126] SetEndOfFile (hFile=0x1e8) returned 1 [0135.134] SetEndOfFile (hFile=0x1e8) returned 1 [0135.141] SetEndOfFile (hFile=0x1e8) returned 1 [0135.152] SetEndOfFile (hFile=0x1e8) returned 1 [0135.157] SetEndOfFile (hFile=0x1e8) returned 1 [0135.163] SetEndOfFile (hFile=0x1e8) returned 1 [0135.169] SetEndOfFile (hFile=0x1e8) returned 1 [0135.173] SetEndOfFile (hFile=0x1e8) returned 1 [0135.181] SetEndOfFile (hFile=0x1e8) returned 1 [0135.188] SetEndOfFile (hFile=0x1e8) returned 1 [0135.197] SetEndOfFile (hFile=0x1e8) returned 1 [0135.204] SetEndOfFile (hFile=0x1e8) returned 1 [0135.210] SetEndOfFile (hFile=0x1e8) returned 1 [0135.218] SetEndOfFile (hFile=0x1e8) returned 1 [0135.226] SetEndOfFile (hFile=0x1e8) returned 1 [0135.231] SetEndOfFile (hFile=0x1e8) returned 1 [0135.241] SetEndOfFile (hFile=0x1e8) returned 1 [0135.248] SetEndOfFile (hFile=0x1e8) returned 1 [0135.255] SetEndOfFile (hFile=0x1e8) returned 1 [0135.262] SetEndOfFile (hFile=0x1e8) returned 1 [0135.269] SetEndOfFile (hFile=0x1e8) returned 1 [0135.275] SetEndOfFile (hFile=0x1e8) returned 1 [0135.282] SetEndOfFile (hFile=0x1e8) returned 1 [0135.290] SetEndOfFile (hFile=0x1e8) returned 1 [0135.295] SetEndOfFile (hFile=0x1e8) returned 1 [0135.301] SetEndOfFile (hFile=0x1e8) returned 1 [0135.309] SetEndOfFile (hFile=0x1e8) returned 1 [0135.315] SetEndOfFile (hFile=0x1e8) returned 1 [0135.323] SetEndOfFile (hFile=0x1e8) returned 1 [0135.329] SetEndOfFile (hFile=0x1e8) returned 1 [0135.335] SetEndOfFile (hFile=0x1e8) returned 1 [0135.340] SetEndOfFile (hFile=0x1e8) returned 1 [0135.346] SetEndOfFile (hFile=0x1e8) returned 1 [0135.355] SetEndOfFile (hFile=0x1e8) returned 1 [0135.360] SetEndOfFile (hFile=0x1e8) returned 1 [0135.375] SetEndOfFile (hFile=0x1e8) returned 1 [0135.381] SetEndOfFile (hFile=0x1e8) returned 1 [0135.387] SetEndOfFile (hFile=0x1e8) returned 1 [0135.393] SetEndOfFile (hFile=0x1e8) returned 1 [0135.398] SetEndOfFile (hFile=0x1e8) returned 1 [0135.404] SetEndOfFile (hFile=0x1e8) returned 1 [0135.409] SetEndOfFile (hFile=0x1e8) returned 1 [0135.436] SetEndOfFile (hFile=0x1e8) returned 1 [0135.445] SetEndOfFile (hFile=0x1e8) returned 1 [0135.452] SetEndOfFile (hFile=0x1e8) returned 1 [0135.460] SetEndOfFile (hFile=0x1e8) returned 1 [0135.468] SetEndOfFile (hFile=0x1e8) returned 1 [0135.583] SetEndOfFile (hFile=0x1e8) returned 1 [0135.590] SetEndOfFile (hFile=0x1e8) returned 1 [0135.595] SetEndOfFile (hFile=0x1e8) returned 1 [0135.602] SetEndOfFile (hFile=0x1e8) returned 1 [0135.611] SetEndOfFile (hFile=0x1e8) returned 1 [0135.671] SetEndOfFile (hFile=0x1e8) returned 1 [0135.681] SetEndOfFile (hFile=0x1e8) returned 1 [0135.686] SetEndOfFile (hFile=0x1e8) returned 1 [0135.694] SetEndOfFile (hFile=0x1e8) returned 1 [0135.700] SetEndOfFile (hFile=0x1e8) returned 1 [0135.707] SetEndOfFile (hFile=0x1e8) returned 1 [0135.721] SetEndOfFile (hFile=0x1e8) returned 1 [0135.728] SetEndOfFile (hFile=0x1e8) returned 1 [0135.734] SetEndOfFile (hFile=0x1e8) returned 1 [0135.744] SetEndOfFile (hFile=0x1e8) returned 1 [0135.751] SetEndOfFile (hFile=0x1e8) returned 1 [0135.759] SetEndOfFile (hFile=0x1e8) returned 1 [0135.766] SetEndOfFile (hFile=0x1e8) returned 1 [0135.774] SetEndOfFile (hFile=0x1e8) returned 1 [0135.780] SetEndOfFile (hFile=0x1e8) returned 1 [0135.788] SetEndOfFile (hFile=0x1e8) returned 1 [0135.796] SetEndOfFile (hFile=0x1e8) returned 1 [0135.804] SetEndOfFile (hFile=0x1e8) returned 1 [0135.810] SetEndOfFile (hFile=0x1e8) returned 1 [0135.817] SetEndOfFile (hFile=0x1e8) returned 1 [0135.823] SetEndOfFile (hFile=0x1e8) returned 1 [0135.829] SetEndOfFile (hFile=0x1e8) returned 1 [0135.836] SetEndOfFile (hFile=0x1e8) returned 1 [0135.843] SetEndOfFile (hFile=0x1e8) returned 1 [0135.850] SetEndOfFile (hFile=0x1e8) returned 1 [0135.859] GetFileType (hFile=0x178) returned 0x1 [0135.862] SetEndOfFile (hFile=0x1e8) returned 1 [0135.870] SetEndOfFile (hFile=0x1e8) returned 1 [0135.876] SetEndOfFile (hFile=0x1e8) returned 1 [0135.884] SetEndOfFile (hFile=0x1e8) returned 1 [0135.894] SetEndOfFile (hFile=0x1e8) returned 1 [0135.901] SetEndOfFile (hFile=0x1e8) returned 1 [0135.910] SetEndOfFile (hFile=0x1e8) returned 1 [0135.918] SetEndOfFile (hFile=0x1e8) returned 1 [0135.924] SetEndOfFile (hFile=0x1e8) returned 1 [0135.932] SetEndOfFile (hFile=0x1e8) returned 1 [0135.938] SetEndOfFile (hFile=0x1e8) returned 1 [0135.945] SetEndOfFile (hFile=0x1e8) returned 1 [0135.953] SetEndOfFile (hFile=0x1e8) returned 1 [0135.960] SetEndOfFile (hFile=0x1e8) returned 1 [0135.966] SetEndOfFile (hFile=0x1e8) returned 1 [0135.974] SetEndOfFile (hFile=0x1e8) returned 1 [0135.981] SetEndOfFile (hFile=0x1e8) returned 1 [0135.988] SetEndOfFile (hFile=0x1e8) returned 1 [0135.995] SetEndOfFile (hFile=0x1e8) returned 1 [0136.000] SetEndOfFile (hFile=0x1e8) returned 1 [0136.008] SetEndOfFile (hFile=0x1e8) returned 1 [0136.013] SetEndOfFile (hFile=0x1e8) returned 1 [0136.019] SetEndOfFile (hFile=0x1e8) returned 1 [0136.025] SetEndOfFile (hFile=0x1e8) returned 1 [0136.040] SetEndOfFile (hFile=0x1e8) returned 1 [0136.046] SetEndOfFile (hFile=0x1e8) returned 1 [0136.056] SetEndOfFile (hFile=0x1e8) returned 1 [0136.061] SetEndOfFile (hFile=0x1e8) returned 1 [0136.072] SetEndOfFile (hFile=0x1e8) returned 1 [0136.079] SetEndOfFile (hFile=0x1e8) returned 1 [0136.089] SetEndOfFile (hFile=0x1e8) returned 1 [0136.097] SetEndOfFile (hFile=0x1e8) returned 1 [0136.104] SetEndOfFile (hFile=0x1e8) returned 1 [0136.111] SetEndOfFile (hFile=0x1e8) returned 1 [0136.118] SetEndOfFile (hFile=0x1e8) returned 1 [0136.123] SetEndOfFile (hFile=0x1e8) returned 1 [0136.131] SetEndOfFile (hFile=0x1e8) returned 1 [0136.137] SetEndOfFile (hFile=0x1e8) returned 1 [0136.141] SetEndOfFile (hFile=0x1e8) returned 1 [0136.147] SetEndOfFile (hFile=0x1e8) returned 1 [0136.153] SetEndOfFile (hFile=0x1e8) returned 1 [0136.169] SetEndOfFile (hFile=0x1e8) returned 1 [0136.175] SetEndOfFile (hFile=0x1e8) returned 1 [0136.181] SetEndOfFile (hFile=0x1e8) returned 1 [0136.187] SetEndOfFile (hFile=0x1e8) returned 1 [0136.194] SetEndOfFile (hFile=0x1e8) returned 1 [0136.201] SetEndOfFile (hFile=0x1e8) returned 1 [0136.212] SetEndOfFile (hFile=0x1e8) returned 1 [0136.218] SetEndOfFile (hFile=0x1e8) returned 1 [0136.229] SetEndOfFile (hFile=0x1e8) returned 1 [0136.236] SetEndOfFile (hFile=0x1e8) returned 1 [0136.242] SetEndOfFile (hFile=0x1e8) returned 1 [0136.251] SetEndOfFile (hFile=0x1e8) returned 1 [0136.259] SetEndOfFile (hFile=0x1e8) returned 1 [0136.285] SetEndOfFile (hFile=0x1e8) returned 1 [0136.293] SetEndOfFile (hFile=0x1e8) returned 1 [0136.300] SetEndOfFile (hFile=0x1e8) returned 1 [0136.307] SetEndOfFile (hFile=0x1e8) returned 1 [0136.315] SetEndOfFile (hFile=0x1e8) returned 1 [0136.323] SetEndOfFile (hFile=0x1e8) returned 1 [0136.330] SetEndOfFile (hFile=0x1e8) returned 1 [0136.339] SetEndOfFile (hFile=0x1e8) returned 1 [0136.346] SetEndOfFile (hFile=0x1e8) returned 1 [0136.352] SetEndOfFile (hFile=0x1e8) returned 1 [0136.358] SetEndOfFile (hFile=0x1e8) returned 1 [0136.365] SetEndOfFile (hFile=0x1e8) returned 1 [0136.372] SetEndOfFile (hFile=0x1e8) returned 1 [0136.378] SetEndOfFile (hFile=0x1e8) returned 1 [0136.386] SetEndOfFile (hFile=0x1e8) returned 1 [0136.392] SetEndOfFile (hFile=0x1e8) returned 1 [0136.398] SetEndOfFile (hFile=0x1e8) returned 1 [0136.406] SetEndOfFile (hFile=0x1e8) returned 1 [0136.418] SetEndOfFile (hFile=0x1e8) returned 1 [0136.424] SetEndOfFile (hFile=0x1e8) returned 1 [0136.440] SetEndOfFile (hFile=0x1e8) returned 1 [0136.448] SetEndOfFile (hFile=0x1e8) returned 1 [0136.454] SetEndOfFile (hFile=0x1e8) returned 1 [0136.464] SetEndOfFile (hFile=0x1e8) returned 1 [0136.471] SetEndOfFile (hFile=0x1e8) returned 1 [0136.484] SetEndOfFile (hFile=0x1e8) returned 1 [0136.492] SetEndOfFile (hFile=0x1e8) returned 1 [0136.500] SetEndOfFile (hFile=0x1e8) returned 1 [0136.506] SetEndOfFile (hFile=0x1e8) returned 1 [0136.516] SetEndOfFile (hFile=0x1e8) returned 1 [0136.525] SetEndOfFile (hFile=0x1e8) returned 1 [0136.531] SetEndOfFile (hFile=0x1e8) returned 1 [0136.539] SetEndOfFile (hFile=0x1e8) returned 1 [0136.544] SetEndOfFile (hFile=0x1e8) returned 1 [0136.552] SetEndOfFile (hFile=0x1e8) returned 1 [0136.558] SetEndOfFile (hFile=0x1e8) returned 1 [0136.566] SetEndOfFile (hFile=0x1e8) returned 1 [0136.574] SetEndOfFile (hFile=0x1e8) returned 1 [0136.580] SetEndOfFile (hFile=0x1e8) returned 1 [0136.589] SetEndOfFile (hFile=0x1e8) returned 1 [0136.596] SetEndOfFile (hFile=0x1e8) returned 1 [0136.603] SetEndOfFile (hFile=0x1e8) returned 1 [0136.610] SetEndOfFile (hFile=0x1e8) returned 1 [0136.673] SetEndOfFile (hFile=0x1e8) returned 1 [0136.690] SetEndOfFile (hFile=0x1e8) returned 1 [0136.697] SetEndOfFile (hFile=0x1e8) returned 1 [0136.714] SetEndOfFile (hFile=0x1e8) returned 1 [0136.721] SetEndOfFile (hFile=0x1e8) returned 1 [0136.728] SetEndOfFile (hFile=0x1e8) returned 1 [0136.735] SetEndOfFile (hFile=0x1e8) returned 1 [0136.742] SetEndOfFile (hFile=0x1e8) returned 1 [0136.750] SetEndOfFile (hFile=0x1e8) returned 1 [0136.762] SetEndOfFile (hFile=0x1e8) returned 1 [0136.769] SetEndOfFile (hFile=0x1e8) returned 1 [0136.775] SetEndOfFile (hFile=0x1e8) returned 1 [0136.781] SetEndOfFile (hFile=0x1e8) returned 1 [0136.788] SetEndOfFile (hFile=0x1e8) returned 1 [0136.795] SetEndOfFile (hFile=0x1e8) returned 1 [0136.803] SetEndOfFile (hFile=0x1e8) returned 1 [0136.811] SetEndOfFile (hFile=0x1e8) returned 1 [0136.819] SetEndOfFile (hFile=0x1e8) returned 1 [0136.825] SetEndOfFile (hFile=0x1e8) returned 1 [0136.832] SetEndOfFile (hFile=0x1e8) returned 1 [0136.839] SetEndOfFile (hFile=0x1e8) returned 1 [0136.845] SetEndOfFile (hFile=0x1e8) returned 1 [0136.856] SetEndOfFile (hFile=0x1e8) returned 1 [0136.862] SetEndOfFile (hFile=0x1e8) returned 1 [0136.868] SetEndOfFile (hFile=0x1e8) returned 1 [0136.875] SetEndOfFile (hFile=0x1e8) returned 1 [0136.882] SetEndOfFile (hFile=0x1e8) returned 1 [0136.889] SetEndOfFile (hFile=0x1e8) returned 1 [0136.899] SetEndOfFile (hFile=0x1e8) returned 1 [0136.909] SetEndOfFile (hFile=0x1e8) returned 1 [0136.915] SetEndOfFile (hFile=0x1e8) returned 1 [0136.921] SetEndOfFile (hFile=0x1e8) returned 1 [0136.927] SetEndOfFile (hFile=0x1e8) returned 1 [0136.932] SetEndOfFile (hFile=0x1e8) returned 1 [0136.940] SetEndOfFile (hFile=0x1e8) returned 1 [0136.945] SetEndOfFile (hFile=0x1e8) returned 1 [0136.950] SetEndOfFile (hFile=0x1e8) returned 1 [0136.955] SetEndOfFile (hFile=0x1e8) returned 1 [0136.961] SetEndOfFile (hFile=0x1e8) returned 1 [0136.966] SetEndOfFile (hFile=0x1e8) returned 1 [0136.971] SetEndOfFile (hFile=0x1e8) returned 1 [0136.977] SetEndOfFile (hFile=0x1e8) returned 1 [0136.983] SetEndOfFile (hFile=0x1e8) returned 1 [0136.987] SetEndOfFile (hFile=0x1e8) returned 1 [0136.994] SetEndOfFile (hFile=0x1e8) returned 1 [0136.999] SetEndOfFile (hFile=0x1e8) returned 1 [0137.005] SetEndOfFile (hFile=0x1e8) returned 1 [0137.011] SetEndOfFile (hFile=0x1e8) returned 1 [0137.017] SetEndOfFile (hFile=0x1e8) returned 1 [0137.022] SetEndOfFile (hFile=0x1e8) returned 1 [0137.027] SetEndOfFile (hFile=0x1e8) returned 1 [0137.032] SetEndOfFile (hFile=0x1e8) returned 1 [0137.047] SetEndOfFile (hFile=0x1e8) returned 1 [0137.053] SetEndOfFile (hFile=0x1e8) returned 1 [0137.058] SetEndOfFile (hFile=0x1e8) returned 1 [0137.066] SetEndOfFile (hFile=0x1e8) returned 1 [0137.070] SetEndOfFile (hFile=0x1e8) returned 1 [0137.074] SetEndOfFile (hFile=0x1e8) returned 1 [0137.080] SetEndOfFile (hFile=0x1e8) returned 1 [0137.087] SetEndOfFile (hFile=0x1e8) returned 1 [0137.093] SetEndOfFile (hFile=0x1e8) returned 1 [0137.099] SetEndOfFile (hFile=0x1e8) returned 1 [0137.104] SetEndOfFile (hFile=0x1e8) returned 1 [0137.110] SetEndOfFile (hFile=0x1e8) returned 1 [0137.117] SetEndOfFile (hFile=0x1e8) returned 1 [0137.123] SetEndOfFile (hFile=0x1e8) returned 1 [0137.136] SetEndOfFile (hFile=0x1e8) returned 1 [0137.143] SetEndOfFile (hFile=0x1e8) returned 1 [0137.149] SetEndOfFile (hFile=0x1e8) returned 1 [0137.156] SetEndOfFile (hFile=0x1e8) returned 1 [0137.166] SetEndOfFile (hFile=0x1e8) returned 1 [0137.170] SetEndOfFile (hFile=0x1e8) returned 1 [0137.176] SetEndOfFile (hFile=0x1e8) returned 1 [0137.181] SetEndOfFile (hFile=0x1e8) returned 1 [0137.186] SetEndOfFile (hFile=0x1e8) returned 1 [0137.192] SetEndOfFile (hFile=0x1e8) returned 1 [0137.197] SetEndOfFile (hFile=0x1e8) returned 1 [0137.202] SetEndOfFile (hFile=0x1e8) returned 1 [0137.209] SetEndOfFile (hFile=0x1e8) returned 1 [0137.213] SetEndOfFile (hFile=0x1e8) returned 1 [0137.219] GetFileType (hFile=0x178) returned 0x1 [0137.221] SetEndOfFile (hFile=0x1e8) returned 1 [0137.227] SetEndOfFile (hFile=0x1e8) returned 1 [0137.232] SetEndOfFile (hFile=0x1e8) returned 1 [0137.237] SetEndOfFile (hFile=0x1e8) returned 1 [0137.244] SetEndOfFile (hFile=0x1e8) returned 1 [0137.250] SetEndOfFile (hFile=0x1e8) returned 1 [0137.257] SetEndOfFile (hFile=0x1e8) returned 1 [0137.261] SetEndOfFile (hFile=0x1e8) returned 1 [0137.268] SetEndOfFile (hFile=0x1e8) returned 1 [0137.274] SetEndOfFile (hFile=0x1e8) returned 1 [0137.279] SetEndOfFile (hFile=0x1e8) returned 1 [0137.285] SetEndOfFile (hFile=0x1e8) returned 1 [0137.290] SetEndOfFile (hFile=0x1e8) returned 1 [0137.294] SetEndOfFile (hFile=0x1e8) returned 1 [0137.302] SetEndOfFile (hFile=0x1e8) returned 1 [0137.309] SetEndOfFile (hFile=0x1e8) returned 1 [0137.316] SetEndOfFile (hFile=0x1e8) returned 1 [0137.323] SetEndOfFile (hFile=0x1e8) returned 1 [0137.330] SetEndOfFile (hFile=0x1e8) returned 1 [0137.337] SetEndOfFile (hFile=0x1e8) returned 1 [0137.343] SetEndOfFile (hFile=0x1e8) returned 1 [0137.349] SetEndOfFile (hFile=0x1e8) returned 1 [0137.356] SetEndOfFile (hFile=0x1e8) returned 1 [0137.362] SetEndOfFile (hFile=0x1e8) returned 1 [0137.369] SetEndOfFile (hFile=0x1e8) returned 1 [0137.375] SetEndOfFile (hFile=0x1e8) returned 1 [0137.385] SetEndOfFile (hFile=0x1e8) returned 1 [0137.393] SetEndOfFile (hFile=0x1e8) returned 1 [0137.399] SetEndOfFile (hFile=0x1e8) returned 1 [0137.406] SetEndOfFile (hFile=0x1e8) returned 1 [0137.419] SetEndOfFile (hFile=0x1e8) returned 1 [0137.517] SetEndOfFile (hFile=0x1e8) returned 1 [0137.524] SetEndOfFile (hFile=0x1e8) returned 1 [0137.530] SetEndOfFile (hFile=0x1e8) returned 1 [0137.537] SetEndOfFile (hFile=0x1e8) returned 1 [0137.544] SetEndOfFile (hFile=0x1e8) returned 1 [0137.558] SetEndOfFile (hFile=0x1e8) returned 1 [0137.566] SetEndOfFile (hFile=0x1e8) returned 1 [0137.573] SetEndOfFile (hFile=0x1e8) returned 1 [0137.580] SetEndOfFile (hFile=0x1e8) returned 1 [0137.587] SetEndOfFile (hFile=0x1e8) returned 1 [0137.593] SetEndOfFile (hFile=0x1e8) returned 1 [0137.603] SetEndOfFile (hFile=0x1e8) returned 1 [0137.608] SetEndOfFile (hFile=0x1e8) returned 1 [0137.811] SetEndOfFile (hFile=0x1e8) returned 1 [0137.816] SetEndOfFile (hFile=0x1e8) returned 1 [0137.821] SetEndOfFile (hFile=0x1e8) returned 1 [0137.827] SetEndOfFile (hFile=0x1e8) returned 1 [0137.833] SetEndOfFile (hFile=0x1e8) returned 1 [0137.840] SetEndOfFile (hFile=0x1e8) returned 1 [0137.847] SetEndOfFile (hFile=0x1e8) returned 1 [0137.856] SetEndOfFile (hFile=0x1e8) returned 1 [0137.873] SetEndOfFile (hFile=0x1e8) returned 1 [0137.879] SetEndOfFile (hFile=0x1e8) returned 1 [0137.885] SetEndOfFile (hFile=0x1e8) returned 1 [0137.892] SetEndOfFile (hFile=0x1e8) returned 1 [0137.898] SetEndOfFile (hFile=0x1e8) returned 1 [0137.904] SetEndOfFile (hFile=0x1e8) returned 1 [0137.929] SetEndOfFile (hFile=0x1e8) returned 1 [0137.936] SetEndOfFile (hFile=0x1e8) returned 1 [0137.943] SetEndOfFile (hFile=0x1e8) returned 1 [0137.948] SetEndOfFile (hFile=0x1e8) returned 1 [0137.955] SetEndOfFile (hFile=0x1e8) returned 1 [0137.962] SetEndOfFile (hFile=0x1e8) returned 1 [0137.967] SetEndOfFile (hFile=0x1e8) returned 1 [0137.976] SetEndOfFile (hFile=0x1e8) returned 1 [0137.980] SetEndOfFile (hFile=0x1e8) returned 1 [0137.985] SetEndOfFile (hFile=0x1e8) returned 1 [0137.990] SetEndOfFile (hFile=0x1e8) returned 1 [0137.996] SetEndOfFile (hFile=0x1e8) returned 1 [0138.002] SetEndOfFile (hFile=0x1e8) returned 1 [0138.006] SetEndOfFile (hFile=0x1e8) returned 1 [0138.012] SetEndOfFile (hFile=0x1e8) returned 1 [0138.017] SetEndOfFile (hFile=0x1e8) returned 1 [0138.022] SetEndOfFile (hFile=0x1e8) returned 1 [0138.029] SetEndOfFile (hFile=0x1e8) returned 1 [0138.042] SetEndOfFile (hFile=0x1e8) returned 1 [0138.047] SetEndOfFile (hFile=0x1e8) returned 1 [0138.053] SetEndOfFile (hFile=0x1e8) returned 1 [0138.059] SetEndOfFile (hFile=0x1e8) returned 1 [0138.067] SetEndOfFile (hFile=0x1e8) returned 1 [0138.081] SetEndOfFile (hFile=0x1e8) returned 1 [0138.087] SetEndOfFile (hFile=0x1e8) returned 1 [0138.092] SetEndOfFile (hFile=0x1e8) returned 1 [0138.098] SetEndOfFile (hFile=0x1e8) returned 1 [0138.104] SetEndOfFile (hFile=0x1e8) returned 1 [0138.109] SetEndOfFile (hFile=0x1e8) returned 1 [0138.114] SetEndOfFile (hFile=0x1e8) returned 1 [0138.120] SetEndOfFile (hFile=0x1e8) returned 1 [0138.127] SetEndOfFile (hFile=0x1e8) returned 1 [0138.133] SetEndOfFile (hFile=0x1e8) returned 1 [0138.140] SetEndOfFile (hFile=0x1e8) returned 1 [0138.147] SetEndOfFile (hFile=0x1e8) returned 1 [0138.152] SetEndOfFile (hFile=0x1e8) returned 1 [0138.159] SetEndOfFile (hFile=0x1e8) returned 1 [0138.164] SetEndOfFile (hFile=0x1e8) returned 1 [0138.169] SetEndOfFile (hFile=0x1e8) returned 1 [0138.177] SetEndOfFile (hFile=0x1e8) returned 1 [0138.184] SetEndOfFile (hFile=0x1e8) returned 1 [0138.189] SetEndOfFile (hFile=0x1e8) returned 1 [0138.195] SetEndOfFile (hFile=0x1e8) returned 1 [0139.111] SetEndOfFile (hFile=0x1e8) returned 1 [0139.121] SetEndOfFile (hFile=0x1e8) returned 1 [0139.129] SetEndOfFile (hFile=0x1e8) returned 1 [0139.135] SetEndOfFile (hFile=0x1e8) returned 1 [0139.140] SetEndOfFile (hFile=0x1e8) returned 1 [0139.186] SetEndOfFile (hFile=0x1e8) returned 1 [0139.193] SetEndOfFile (hFile=0x1e8) returned 1 [0139.199] SetEndOfFile (hFile=0x1e8) returned 1 [0139.210] SetEndOfFile (hFile=0x1e8) returned 1 [0139.215] SetEndOfFile (hFile=0x1e8) returned 1 [0139.260] SetEndOfFile (hFile=0x1e8) returned 1 [0139.267] SetEndOfFile (hFile=0x1e8) returned 1 [0139.273] SetEndOfFile (hFile=0x1e8) returned 1 [0139.280] SetEndOfFile (hFile=0x1e8) returned 1 [0139.288] SetEndOfFile (hFile=0x1e8) returned 1 [0139.294] SetEndOfFile (hFile=0x1e8) returned 1 [0139.739] SetEndOfFile (hFile=0x1e8) returned 1 [0139.745] SetEndOfFile (hFile=0x1e8) returned 1 [0139.754] SetEndOfFile (hFile=0x1e8) returned 1 [0139.760] SetEndOfFile (hFile=0x1e8) returned 1 [0139.768] SetEndOfFile (hFile=0x1e8) returned 1 [0139.774] SetEndOfFile (hFile=0x1e8) returned 1 [0139.849] SetEndOfFile (hFile=0x1e8) returned 1 [0139.857] SetEndOfFile (hFile=0x1e8) returned 1 [0139.863] SetEndOfFile (hFile=0x1e8) returned 1 [0139.871] SetEndOfFile (hFile=0x1e8) returned 1 [0139.898] SetEndOfFile (hFile=0x1e8) returned 1 [0139.908] SetEndOfFile (hFile=0x1e8) returned 1 [0139.915] SetEndOfFile (hFile=0x1e8) returned 1 [0139.940] SetEndOfFile (hFile=0x1e8) returned 1 [0139.947] SetEndOfFile (hFile=0x1e8) returned 1 [0139.975] SetEndOfFile (hFile=0x1e8) returned 1 [0139.981] SetEndOfFile (hFile=0x1e8) returned 1 [0139.989] SetEndOfFile (hFile=0x1e8) returned 1 [0139.996] SetEndOfFile (hFile=0x1e8) returned 1 [0140.004] SetEndOfFile (hFile=0x1e8) returned 1 [0140.012] SetEndOfFile (hFile=0x1e8) returned 1 [0140.025] SetEndOfFile (hFile=0x1e8) returned 1 [0140.033] SetEndOfFile (hFile=0x1e8) returned 1 [0140.041] SetEndOfFile (hFile=0x1e8) returned 1 [0140.047] SetEndOfFile (hFile=0x1e8) returned 1 [0140.057] SetEndOfFile (hFile=0x1e8) returned 1 [0140.088] SetEndOfFile (hFile=0x1e8) returned 1 [0140.094] SetEndOfFile (hFile=0x1e8) returned 1 [0140.102] SetEndOfFile (hFile=0x1e8) returned 1 [0140.131] SetEndOfFile (hFile=0x1e8) returned 1 [0140.138] SetEndOfFile (hFile=0x1e8) returned 1 [0140.146] SetEndOfFile (hFile=0x1e8) returned 1 [0140.153] SetEndOfFile (hFile=0x1e8) returned 1 [0140.159] SetEndOfFile (hFile=0x1e8) returned 1 [0140.166] SetEndOfFile (hFile=0x1e8) returned 1 [0140.188] SetEndOfFile (hFile=0x1e8) returned 1 [0140.198] SetEndOfFile (hFile=0x1e8) returned 1 [0140.205] SetEndOfFile (hFile=0x1e8) returned 1 [0140.210] SetEndOfFile (hFile=0x1e8) returned 1 [0140.225] SetEndOfFile (hFile=0x1e8) returned 1 [0140.232] SetEndOfFile (hFile=0x1e8) returned 1 [0140.245] SetEndOfFile (hFile=0x1e8) returned 1 [0140.253] SetEndOfFile (hFile=0x1e8) returned 1 [0140.260] SetEndOfFile (hFile=0x1e8) returned 1 [0140.284] SetEndOfFile (hFile=0x1e8) returned 1 [0140.291] SetEndOfFile (hFile=0x1e8) returned 1 [0140.298] SetEndOfFile (hFile=0x1e8) returned 1 [0140.307] SetEndOfFile (hFile=0x1e8) returned 1 [0140.314] SetEndOfFile (hFile=0x1e8) returned 1 [0140.320] SetEndOfFile (hFile=0x1e8) returned 1 [0140.372] SetEndOfFile (hFile=0x1e8) returned 1 [0140.380] SetEndOfFile (hFile=0x1e8) returned 1 [0140.386] SetEndOfFile (hFile=0x1e8) returned 1 [0140.394] SetEndOfFile (hFile=0x1e8) returned 1 [0140.401] SetEndOfFile (hFile=0x1e8) returned 1 [0140.412] SetEndOfFile (hFile=0x1e8) returned 1 [0140.420] SetEndOfFile (hFile=0x1e8) returned 1 [0140.427] SetEndOfFile (hFile=0x1e8) returned 1 [0140.433] SetEndOfFile (hFile=0x1e8) returned 1 [0140.439] SetEndOfFile (hFile=0x1e8) returned 1 [0140.445] SetEndOfFile (hFile=0x1e8) returned 1 [0140.458] SetEndOfFile (hFile=0x1e8) returned 1 [0140.469] SetEndOfFile (hFile=0x1e8) returned 1 [0140.477] SetEndOfFile (hFile=0x1e8) returned 1 [0140.486] SetEndOfFile (hFile=0x1e8) returned 1 [0140.493] SetEndOfFile (hFile=0x1e8) returned 1 [0140.980] SetEndOfFile (hFile=0x1e8) returned 1 [0140.988] SetEndOfFile (hFile=0x1e8) returned 1 [0140.995] SetEndOfFile (hFile=0x1e8) returned 1 [0141.003] SetEndOfFile (hFile=0x1e8) returned 1 [0141.009] SetEndOfFile (hFile=0x1e8) returned 1 [0141.030] SetEndOfFile (hFile=0x1e8) returned 1 [0141.037] SetEndOfFile (hFile=0x1e8) returned 1 [0141.045] SetEndOfFile (hFile=0x1e8) returned 1 [0141.052] SetEndOfFile (hFile=0x1e8) returned 1 [0141.059] SetEndOfFile (hFile=0x1e8) returned 1 [0141.080] SetEndOfFile (hFile=0x1e8) returned 1 [0141.088] SetEndOfFile (hFile=0x1e8) returned 1 [0141.095] SetEndOfFile (hFile=0x1e8) returned 1 [0141.103] SetEndOfFile (hFile=0x1e8) returned 1 [0141.138] SetEndOfFile (hFile=0x1e8) returned 1 [0141.145] SetEndOfFile (hFile=0x1e8) returned 1 [0141.151] SetEndOfFile (hFile=0x1e8) returned 1 [0141.157] SetEndOfFile (hFile=0x1e8) returned 1 [0141.164] SetEndOfFile (hFile=0x1e8) returned 1 [0141.184] SetEndOfFile (hFile=0x1e8) returned 1 [0141.192] SetEndOfFile (hFile=0x1e8) returned 1 [0141.200] SetEndOfFile (hFile=0x1e8) returned 1 [0141.210] SetEndOfFile (hFile=0x1e8) returned 1 [0141.264] SetEndOfFile (hFile=0x1e8) returned 1 [0141.271] SetEndOfFile (hFile=0x1e8) returned 1 [0141.279] SetEndOfFile (hFile=0x1e8) returned 1 [0141.292] SetEndOfFile (hFile=0x1e8) returned 1 [0141.308] SetEndOfFile (hFile=0x1e8) returned 1 [0141.315] SetEndOfFile (hFile=0x1e8) returned 1 [0141.324] SetEndOfFile (hFile=0x1e8) returned 1 [0141.330] SetEndOfFile (hFile=0x1e8) returned 1 [0141.336] SetEndOfFile (hFile=0x1e8) returned 1 [0141.362] SetEndOfFile (hFile=0x1e8) returned 1 [0141.367] SetEndOfFile (hFile=0x1e8) returned 1 [0141.372] SetEndOfFile (hFile=0x1e8) returned 1 [0141.378] SetEndOfFile (hFile=0x1e8) returned 1 [0141.384] SetEndOfFile (hFile=0x1e8) returned 1 [0141.389] SetEndOfFile (hFile=0x1e8) returned 1 [0141.393] SetEndOfFile (hFile=0x1e8) returned 1 [0141.398] SetEndOfFile (hFile=0x1e8) returned 1 [0141.427] SetEndOfFile (hFile=0x1e8) returned 1 [0141.432] SetEndOfFile (hFile=0x1e8) returned 1 [0141.438] SetEndOfFile (hFile=0x1e8) returned 1 [0141.444] SetEndOfFile (hFile=0x1e8) returned 1 [0141.448] SetEndOfFile (hFile=0x1e8) returned 1 [0141.454] SetEndOfFile (hFile=0x1e8) returned 1 [0141.459] SetEndOfFile (hFile=0x1e8) returned 1 [0141.472] SetEndOfFile (hFile=0x1e8) returned 1 [0141.479] SetEndOfFile (hFile=0x1e8) returned 1 [0141.485] SetEndOfFile (hFile=0x1e8) returned 1 [0141.490] SetEndOfFile (hFile=0x1e8) returned 1 [0141.500] SetEndOfFile (hFile=0x1e8) returned 1 [0141.506] SetEndOfFile (hFile=0x1e8) returned 1 [0141.539] GetFileType (hFile=0x178) returned 0x1 [0141.544] SetEndOfFile (hFile=0x1e8) returned 1 [0141.552] SetEndOfFile (hFile=0x1e8) returned 1 [0141.560] SetEndOfFile (hFile=0x1e8) returned 1 [0141.565] SetEndOfFile (hFile=0x1e8) returned 1 [0141.571] SetEndOfFile (hFile=0x1e8) returned 1 [0141.578] SetEndOfFile (hFile=0x1e8) returned 1 [0141.584] SetEndOfFile (hFile=0x1e8) returned 1 [0141.591] SetEndOfFile (hFile=0x1e8) returned 1 [0141.595] SetEndOfFile (hFile=0x1e8) returned 1 [0141.600] SetEndOfFile (hFile=0x1e8) returned 1 [0141.605] SetEndOfFile (hFile=0x1e8) returned 1 [0141.611] SetEndOfFile (hFile=0x1e8) returned 1 [0141.616] SetEndOfFile (hFile=0x1e8) returned 1 [0141.627] SetEndOfFile (hFile=0x1e8) returned 1 [0141.634] SetEndOfFile (hFile=0x1e8) returned 1 [0141.640] SetEndOfFile (hFile=0x1e8) returned 1 [0141.645] SetEndOfFile (hFile=0x1e8) returned 1 [0141.656] SetEndOfFile (hFile=0x1e8) returned 1 [0141.662] SetEndOfFile (hFile=0x1e8) returned 1 [0141.674] SetEndOfFile (hFile=0x1e8) returned 1 [0141.681] SetEndOfFile (hFile=0x1e8) returned 1 [0141.689] SetEndOfFile (hFile=0x1e8) returned 1 [0141.695] SetEndOfFile (hFile=0x1e8) returned 1 [0141.705] SetEndOfFile (hFile=0x1e8) returned 1 [0141.711] SetEndOfFile (hFile=0x1e8) returned 1 [0141.726] SetEndOfFile (hFile=0x1e8) returned 1 [0141.732] SetEndOfFile (hFile=0x1e8) returned 1 [0141.738] SetEndOfFile (hFile=0x1e8) returned 1 [0141.743] SetEndOfFile (hFile=0x1e8) returned 1 [0141.749] SetEndOfFile (hFile=0x1e8) returned 1 [0141.754] SetEndOfFile (hFile=0x1e8) returned 1 [0141.760] SetEndOfFile (hFile=0x1e8) returned 1 [0142.972] SetEndOfFile (hFile=0x1e8) returned 1 [0142.978] SetEndOfFile (hFile=0x1e8) returned 1 [0142.984] SetEndOfFile (hFile=0x1e8) returned 1 [0142.989] SetEndOfFile (hFile=0x1e8) returned 1 [0142.996] SetEndOfFile (hFile=0x1e8) returned 1 [0143.002] SetEndOfFile (hFile=0x1e8) returned 1 [0143.017] SetEndOfFile (hFile=0x1e8) returned 1 [0143.025] SetEndOfFile (hFile=0x1e8) returned 1 [0143.030] SetEndOfFile (hFile=0x1e8) returned 1 [0143.035] SetEndOfFile (hFile=0x1e8) returned 1 [0143.041] SetEndOfFile (hFile=0x1e8) returned 1 [0143.046] SetEndOfFile (hFile=0x1e8) returned 1 [0143.051] SetEndOfFile (hFile=0x1e8) returned 1 [0143.059] SetEndOfFile (hFile=0x1e8) returned 1 [0143.065] SetEndOfFile (hFile=0x1e8) returned 1 [0143.070] SetEndOfFile (hFile=0x1e8) returned 1 [0143.081] SetEndOfFile (hFile=0x1e8) returned 1 [0143.086] SetEndOfFile (hFile=0x1e8) returned 1 [0143.092] SetEndOfFile (hFile=0x1e8) returned 1 [0143.098] SetEndOfFile (hFile=0x1e8) returned 1 [0143.102] SetEndOfFile (hFile=0x1e8) returned 1 [0143.108] SetEndOfFile (hFile=0x1e8) returned 1 [0143.113] SetEndOfFile (hFile=0x1e8) returned 1 [0143.118] SetEndOfFile (hFile=0x1e8) returned 1 [0143.123] SetEndOfFile (hFile=0x1e8) returned 1 [0143.128] SetEndOfFile (hFile=0x1e8) returned 1 [0143.133] SetEndOfFile (hFile=0x1e8) returned 1 [0143.138] SetEndOfFile (hFile=0x1e8) returned 1 [0143.143] SetEndOfFile (hFile=0x1e8) returned 1 [0143.150] SetEndOfFile (hFile=0x1e8) returned 1 [0143.155] SetEndOfFile (hFile=0x1e8) returned 1 [0143.160] SetEndOfFile (hFile=0x1e8) returned 1 [0143.165] SetEndOfFile (hFile=0x1e8) returned 1 [0143.171] SetEndOfFile (hFile=0x1e8) returned 1 [0143.175] SetEndOfFile (hFile=0x1e8) returned 1 [0143.181] SetEndOfFile (hFile=0x1e8) returned 1 [0143.186] SetEndOfFile (hFile=0x1e8) returned 1 [0143.190] SetEndOfFile (hFile=0x1e8) returned 1 [0143.214] GetFileType (hFile=0x178) returned 0x1 [0143.217] SetEndOfFile (hFile=0x1e8) returned 1 [0143.223] SetEndOfFile (hFile=0x1e8) returned 1 [0143.228] SetEndOfFile (hFile=0x1e8) returned 1 [0143.232] SetEndOfFile (hFile=0x1e8) returned 1 [0143.238] SetEndOfFile (hFile=0x1e8) returned 1 [0143.243] SetEndOfFile (hFile=0x1e8) returned 1 [0143.249] SetEndOfFile (hFile=0x1e8) returned 1 [0143.255] SetEndOfFile (hFile=0x1e8) returned 1 [0143.261] SetEndOfFile (hFile=0x1e8) returned 1 [0143.280] SetEndOfFile (hFile=0x1e8) returned 1 [0143.287] SetEndOfFile (hFile=0x1e8) returned 1 [0143.295] SetEndOfFile (hFile=0x1e8) returned 1 [0143.300] SetEndOfFile (hFile=0x1e8) returned 1 [0143.308] SetEndOfFile (hFile=0x1e8) returned 1 [0143.314] SetEndOfFile (hFile=0x1e8) returned 1 [0143.320] SetEndOfFile (hFile=0x1e8) returned 1 [0143.336] SetEndOfFile (hFile=0x1e8) returned 1 [0143.344] SetEndOfFile (hFile=0x1e8) returned 1 [0143.351] SetEndOfFile (hFile=0x1e8) returned 1 [0143.357] SetEndOfFile (hFile=0x1e8) returned 1 [0143.365] SetEndOfFile (hFile=0x1e8) returned 1 [0143.374] SetEndOfFile (hFile=0x1e8) returned 1 [0143.380] SetEndOfFile (hFile=0x1e8) returned 1 [0143.388] SetEndOfFile (hFile=0x1e8) returned 1 [0143.394] SetEndOfFile (hFile=0x1e8) returned 1 [0143.401] SetEndOfFile (hFile=0x1e8) returned 1 [0143.410] SetEndOfFile (hFile=0x1e8) returned 1 [0143.419] SetEndOfFile (hFile=0x1e8) returned 1 [0143.426] SetEndOfFile (hFile=0x1e8) returned 1 [0143.432] SetEndOfFile (hFile=0x1e8) returned 1 [0143.452] SetEndOfFile (hFile=0x1e8) returned 1 [0143.459] SetEndOfFile (hFile=0x1e8) returned 1 [0143.478] SetEndOfFile (hFile=0x1e8) returned 1 [0143.486] SetEndOfFile (hFile=0x1e8) returned 1 [0143.492] SetEndOfFile (hFile=0x1e8) returned 1 [0143.530] SetEndOfFile (hFile=0x1e8) returned 1 [0143.539] SetEndOfFile (hFile=0x1e8) returned 1 [0143.547] SetEndOfFile (hFile=0x1e8) returned 1 [0143.553] SetEndOfFile (hFile=0x1e8) returned 1 [0143.560] SetEndOfFile (hFile=0x1e8) returned 1 [0143.567] SetEndOfFile (hFile=0x1e8) returned 1 [0143.575] SetEndOfFile (hFile=0x1e8) returned 1 [0143.582] SetEndOfFile (hFile=0x1e8) returned 1 [0143.589] SetEndOfFile (hFile=0x1e8) returned 1 [0143.596] SetEndOfFile (hFile=0x1e8) returned 1 [0143.603] SetEndOfFile (hFile=0x1e8) returned 1 [0143.609] SetEndOfFile (hFile=0x1e8) returned 1 [0143.615] SetEndOfFile (hFile=0x1e8) returned 1 [0143.620] SetEndOfFile (hFile=0x1e8) returned 1 [0143.626] SetEndOfFile (hFile=0x1e8) returned 1 [0143.632] SetEndOfFile (hFile=0x1e8) returned 1 [0143.640] SetEndOfFile (hFile=0x1e8) returned 1 [0143.650] SetEndOfFile (hFile=0x1e8) returned 1 [0143.657] SetEndOfFile (hFile=0x1e8) returned 1 [0143.663] SetEndOfFile (hFile=0x1e8) returned 1 [0143.672] SetEndOfFile (hFile=0x1e8) returned 1 [0143.679] SetEndOfFile (hFile=0x1e8) returned 1 [0143.687] SetEndOfFile (hFile=0x1e8) returned 1 [0143.698] SetEndOfFile (hFile=0x1e8) returned 1 [0143.704] SetEndOfFile (hFile=0x1e8) returned 1 [0143.710] SetEndOfFile (hFile=0x1e8) returned 1 [0143.717] SetEndOfFile (hFile=0x1e8) returned 1 [0143.724] SetEndOfFile (hFile=0x1e8) returned 1 [0143.730] SetEndOfFile (hFile=0x1e8) returned 1 [0143.737] SetEndOfFile (hFile=0x1e8) returned 1 [0143.744] SetEndOfFile (hFile=0x1e8) returned 1 [0143.749] SetEndOfFile (hFile=0x1e8) returned 1 [0143.758] SetEndOfFile (hFile=0x1e8) returned 1 [0143.765] SetEndOfFile (hFile=0x1e8) returned 1 [0143.771] SetEndOfFile (hFile=0x1e8) returned 1 [0143.777] SetEndOfFile (hFile=0x1e8) returned 1 [0143.782] SetEndOfFile (hFile=0x1e8) returned 1 [0143.788] SetEndOfFile (hFile=0x1e8) returned 1 [0143.796] SetEndOfFile (hFile=0x1e8) returned 1 [0143.803] SetEndOfFile (hFile=0x1e8) returned 1 [0143.809] SetEndOfFile (hFile=0x1e8) returned 1 [0143.815] SetEndOfFile (hFile=0x1e8) returned 1 [0143.822] SetEndOfFile (hFile=0x1e8) returned 1 [0143.832] SetEndOfFile (hFile=0x1e8) returned 1 [0143.837] SetEndOfFile (hFile=0x1e8) returned 1 [0143.850] SetEndOfFile (hFile=0x1e8) returned 1 [0143.859] SetEndOfFile (hFile=0x1e8) returned 1 [0143.865] SetEndOfFile (hFile=0x1e8) returned 1 [0143.872] SetEndOfFile (hFile=0x1e8) returned 1 [0143.880] SetEndOfFile (hFile=0x1e8) returned 1 [0143.887] SetEndOfFile (hFile=0x1e8) returned 1 [0143.894] SetEndOfFile (hFile=0x1e8) returned 1 [0143.901] SetEndOfFile (hFile=0x1e8) returned 1 [0143.907] SetEndOfFile (hFile=0x1e8) returned 1 [0143.913] SetEndOfFile (hFile=0x1e8) returned 1 [0143.922] SetEndOfFile (hFile=0x1e8) returned 1 [0143.928] SetEndOfFile (hFile=0x1e8) returned 1 [0143.935] SetEndOfFile (hFile=0x1e8) returned 1 [0143.940] SetEndOfFile (hFile=0x1e8) returned 1 [0143.946] SetEndOfFile (hFile=0x1e8) returned 1 [0143.953] SetEndOfFile (hFile=0x1e8) returned 1 [0143.959] SetEndOfFile (hFile=0x1e8) returned 1 [0143.966] SetEndOfFile (hFile=0x1e8) returned 1 [0143.973] SetEndOfFile (hFile=0x1e8) returned 1 [0143.979] SetEndOfFile (hFile=0x1e8) returned 1 [0143.986] SetEndOfFile (hFile=0x1e8) returned 1 [0143.992] SetEndOfFile (hFile=0x1e8) returned 1 [0144.002] SetEndOfFile (hFile=0x1e8) returned 1 [0144.015] SetEndOfFile (hFile=0x1e8) returned 1 [0144.022] SetEndOfFile (hFile=0x1e8) returned 1 [0144.031] SetEndOfFile (hFile=0x1e8) returned 1 [0144.038] SetEndOfFile (hFile=0x1e8) returned 1 [0144.046] SetEndOfFile (hFile=0x1e8) returned 1 [0144.052] SetEndOfFile (hFile=0x1e8) returned 1 [0144.062] SetEndOfFile (hFile=0x1e8) returned 1 [0144.069] SetEndOfFile (hFile=0x1e8) returned 1 [0144.075] SetEndOfFile (hFile=0x1e8) returned 1 [0144.082] SetEndOfFile (hFile=0x1e8) returned 1 [0144.089] SetEndOfFile (hFile=0x1e8) returned 1 [0144.094] SetEndOfFile (hFile=0x1e8) returned 1 [0144.100] SetEndOfFile (hFile=0x1e8) returned 1 [0144.107] SetEndOfFile (hFile=0x1e8) returned 1 [0144.113] SetEndOfFile (hFile=0x1e8) returned 1 [0144.120] SetEndOfFile (hFile=0x1e8) returned 1 [0144.127] SetEndOfFile (hFile=0x1e8) returned 1 [0144.134] SetEndOfFile (hFile=0x1e8) returned 1 [0144.140] SetEndOfFile (hFile=0x1e8) returned 1 [0144.147] SetEndOfFile (hFile=0x1e8) returned 1 [0144.156] SetEndOfFile (hFile=0x1e8) returned 1 [0144.162] SetEndOfFile (hFile=0x1e8) returned 1 [0144.171] SetEndOfFile (hFile=0x1e8) returned 1 [0144.177] SetEndOfFile (hFile=0x1e8) returned 1 [0144.186] SetEndOfFile (hFile=0x1e8) returned 1 [0144.194] SetEndOfFile (hFile=0x1e8) returned 1 [0144.201] SetEndOfFile (hFile=0x1e8) returned 1 [0144.210] SetEndOfFile (hFile=0x1e8) returned 1 [0144.217] SetEndOfFile (hFile=0x1e8) returned 1 [0144.224] SetEndOfFile (hFile=0x1e8) returned 1 [0144.230] SetEndOfFile (hFile=0x1e8) returned 1 [0144.237] SetEndOfFile (hFile=0x1e8) returned 1 [0144.244] SetEndOfFile (hFile=0x1e8) returned 1 [0144.250] SetEndOfFile (hFile=0x1e8) returned 1 [0144.256] SetEndOfFile (hFile=0x1e8) returned 1 [0144.262] SetEndOfFile (hFile=0x1e8) returned 1 [0144.269] SetEndOfFile (hFile=0x1e8) returned 1 [0144.275] SetEndOfFile (hFile=0x1e8) returned 1 [0144.341] SetEndOfFile (hFile=0x1e8) returned 1 [0144.349] SetEndOfFile (hFile=0x1e8) returned 1 [0144.355] SetEndOfFile (hFile=0x1e8) returned 1 [0144.363] SetEndOfFile (hFile=0x1e8) returned 1 [0144.372] SetEndOfFile (hFile=0x1e8) returned 1 [0144.378] SetEndOfFile (hFile=0x1e8) returned 1 [0144.386] SetEndOfFile (hFile=0x1e8) returned 1 [0144.393] SetEndOfFile (hFile=0x1e8) returned 1 [0144.400] SetEndOfFile (hFile=0x1e8) returned 1 [0144.407] SetEndOfFile (hFile=0x1e8) returned 1 [0144.416] SetEndOfFile (hFile=0x1e8) returned 1 [0144.423] SetEndOfFile (hFile=0x1e8) returned 1 [0144.433] SetEndOfFile (hFile=0x1e8) returned 1 [0144.440] SetEndOfFile (hFile=0x1e8) returned 1 [0144.448] SetEndOfFile (hFile=0x1e8) returned 1 [0144.470] SetEndOfFile (hFile=0x1e8) returned 1 [0144.479] SetEndOfFile (hFile=0x1e8) returned 1 [0144.485] SetEndOfFile (hFile=0x1e8) returned 1 [0144.521] SetEndOfFile (hFile=0x1e8) returned 1 [0144.541] GetFileType (hFile=0x178) returned 0x1 [0144.543] SetEndOfFile (hFile=0x1e8) returned 1 [0144.580] SetEndOfFile (hFile=0x1e8) returned 1 [0144.587] SetEndOfFile (hFile=0x1e8) returned 1 [0144.594] SetEndOfFile (hFile=0x1e8) returned 1 [0144.601] SetEndOfFile (hFile=0x1e8) returned 1 [0144.608] SetEndOfFile (hFile=0x1e8) returned 1 [0144.614] SetEndOfFile (hFile=0x1e8) returned 1 [0144.621] SetEndOfFile (hFile=0x1e8) returned 1 [0144.627] SetEndOfFile (hFile=0x1e8) returned 1 [0144.633] SetEndOfFile (hFile=0x1e8) returned 1 [0144.642] SetEndOfFile (hFile=0x1e8) returned 1 [0144.650] SetEndOfFile (hFile=0x1e8) returned 1 [0144.656] SetEndOfFile (hFile=0x1e8) returned 1 [0144.664] SetEndOfFile (hFile=0x1e8) returned 1 [0144.670] SetEndOfFile (hFile=0x1e8) returned 1 [0144.676] SetEndOfFile (hFile=0x1e8) returned 1 [0144.683] SetEndOfFile (hFile=0x1e8) returned 1 [0144.690] SetEndOfFile (hFile=0x1e8) returned 1 [0144.703] SetEndOfFile (hFile=0x1e8) returned 1 [0144.714] SetEndOfFile (hFile=0x1e8) returned 1 [0144.721] SetEndOfFile (hFile=0x1e8) returned 1 [0144.730] SetEndOfFile (hFile=0x1e8) returned 1 [0144.736] SetEndOfFile (hFile=0x1e8) returned 1 [0144.744] SetEndOfFile (hFile=0x1e8) returned 1 [0144.751] SetEndOfFile (hFile=0x1e8) returned 1 [0144.757] SetEndOfFile (hFile=0x1e8) returned 1 [0144.765] SetEndOfFile (hFile=0x1e8) returned 1 [0144.771] SetEndOfFile (hFile=0x1e8) returned 1 [0144.777] SetEndOfFile (hFile=0x1e8) returned 1 [0144.785] SetEndOfFile (hFile=0x1e8) returned 1 [0144.793] SetEndOfFile (hFile=0x1e8) returned 1 [0144.800] SetEndOfFile (hFile=0x1e8) returned 1 [0144.812] SetEndOfFile (hFile=0x1e8) returned 1 [0144.821] SetEndOfFile (hFile=0x1e8) returned 1 [0144.827] SetEndOfFile (hFile=0x1e8) returned 1 [0144.834] SetEndOfFile (hFile=0x1e8) returned 1 [0144.844] SetEndOfFile (hFile=0x1e8) returned 1 [0144.851] SetEndOfFile (hFile=0x1e8) returned 1 [0144.858] SetEndOfFile (hFile=0x1e8) returned 1 [0144.864] SetEndOfFile (hFile=0x1e8) returned 1 [0144.870] SetEndOfFile (hFile=0x1e8) returned 1 [0144.877] SetEndOfFile (hFile=0x1e8) returned 1 [0144.885] SetEndOfFile (hFile=0x1e8) returned 1 [0144.891] SetEndOfFile (hFile=0x1e8) returned 1 [0144.901] SetEndOfFile (hFile=0x1e8) returned 1 [0144.906] SetEndOfFile (hFile=0x1e8) returned 1 [0144.913] SetEndOfFile (hFile=0x1e8) returned 1 [0144.922] SetEndOfFile (hFile=0x1e8) returned 1 [0144.930] SetEndOfFile (hFile=0x1e8) returned 1 [0144.937] SetEndOfFile (hFile=0x1e8) returned 1 [0144.943] SetEndOfFile (hFile=0x1e8) returned 1 [0144.951] SetEndOfFile (hFile=0x1e8) returned 1 [0144.958] SetEndOfFile (hFile=0x1e8) returned 1 [0144.964] SetEndOfFile (hFile=0x1e8) returned 1 [0144.974] SetEndOfFile (hFile=0x1e8) returned 1 [0144.982] SetEndOfFile (hFile=0x1e8) returned 1 [0144.988] SetEndOfFile (hFile=0x1e8) returned 1 [0144.998] SetEndOfFile (hFile=0x1e8) returned 1 [0145.007] SetEndOfFile (hFile=0x1e8) returned 1 [0145.014] SetEndOfFile (hFile=0x1e8) returned 1 [0145.019] SetEndOfFile (hFile=0x1e8) returned 1 [0145.025] SetEndOfFile (hFile=0x1e8) returned 1 [0145.030] SetEndOfFile (hFile=0x1e8) returned 1 [0145.036] SetEndOfFile (hFile=0x1e8) returned 1 [0145.041] SetEndOfFile (hFile=0x1e8) returned 1 [0145.047] SetEndOfFile (hFile=0x1e8) returned 1 [0145.054] SetEndOfFile (hFile=0x1e8) returned 1 [0145.058] SetEndOfFile (hFile=0x1e8) returned 1 [0145.063] SetEndOfFile (hFile=0x1e8) returned 1 [0145.068] SetEndOfFile (hFile=0x1e8) returned 1 [0145.077] SetEndOfFile (hFile=0x1e8) returned 1 [0145.083] SetEndOfFile (hFile=0x1e8) returned 1 [0145.089] SetEndOfFile (hFile=0x1e8) returned 1 [0145.095] SetEndOfFile (hFile=0x1e8) returned 1 [0145.100] SetEndOfFile (hFile=0x1e8) returned 1 [0145.106] SetEndOfFile (hFile=0x1e8) returned 1 [0145.113] SetEndOfFile (hFile=0x1e8) returned 1 [0145.120] SetEndOfFile (hFile=0x1e8) returned 1 [0145.125] SetEndOfFile (hFile=0x1e8) returned 1 [0145.130] SetEndOfFile (hFile=0x1e8) returned 1 [0145.136] SetEndOfFile (hFile=0x1e8) returned 1 [0145.141] SetEndOfFile (hFile=0x1e8) returned 1 [0145.146] SetEndOfFile (hFile=0x1e8) returned 1 [0145.152] SetEndOfFile (hFile=0x1e8) returned 1 [0145.157] SetEndOfFile (hFile=0x1e8) returned 1 [0145.163] SetEndOfFile (hFile=0x1e8) returned 1 [0145.168] SetEndOfFile (hFile=0x1e8) returned 1 [0145.173] SetEndOfFile (hFile=0x1e8) returned 1 [0145.177] SetEndOfFile (hFile=0x1e8) returned 1 [0145.182] SetEndOfFile (hFile=0x1e8) returned 1 [0145.187] SetEndOfFile (hFile=0x1e8) returned 1 [0145.192] SetEndOfFile (hFile=0x1e8) returned 1 [0145.199] SetEndOfFile (hFile=0x1e8) returned 1 [0145.205] SetEndOfFile (hFile=0x1e8) returned 1 [0145.211] SetEndOfFile (hFile=0x1e8) returned 1 [0145.217] SetEndOfFile (hFile=0x1e8) returned 1 [0145.225] SetEndOfFile (hFile=0x1e8) returned 1 [0145.230] SetEndOfFile (hFile=0x1e8) returned 1 [0145.239] SetEndOfFile (hFile=0x1e8) returned 1 [0145.245] SetEndOfFile (hFile=0x1e8) returned 1 [0145.250] SetEndOfFile (hFile=0x1e8) returned 1 [0145.256] SetEndOfFile (hFile=0x1e8) returned 1 [0145.262] SetEndOfFile (hFile=0x1e8) returned 1 [0145.267] SetEndOfFile (hFile=0x1e8) returned 1 [0145.273] SetEndOfFile (hFile=0x1e8) returned 1 [0145.278] SetEndOfFile (hFile=0x1e8) returned 1 [0145.283] SetEndOfFile (hFile=0x1e8) returned 1 [0145.288] SetEndOfFile (hFile=0x1e8) returned 1 [0145.294] SetEndOfFile (hFile=0x1e8) returned 1 [0145.300] SetEndOfFile (hFile=0x1e8) returned 1 [0145.308] SetEndOfFile (hFile=0x1e8) returned 1 [0145.314] SetEndOfFile (hFile=0x1e8) returned 1 [0145.321] SetEndOfFile (hFile=0x1e8) returned 1 [0145.327] SetEndOfFile (hFile=0x1e8) returned 1 [0145.334] SetEndOfFile (hFile=0x1e8) returned 1 [0145.341] SetEndOfFile (hFile=0x1e8) returned 1 [0145.370] SetEndOfFile (hFile=0x1e8) returned 1 [0145.378] SetEndOfFile (hFile=0x1e8) returned 1 [0145.389] SetEndOfFile (hFile=0x1e8) returned 1 [0145.395] SetEndOfFile (hFile=0x1e8) returned 1 [0145.403] SetEndOfFile (hFile=0x1e8) returned 1 [0145.413] SetEndOfFile (hFile=0x1e8) returned 1 [0145.421] SetEndOfFile (hFile=0x1e8) returned 1 [0145.431] SetEndOfFile (hFile=0x1e8) returned 1 [0145.439] SetEndOfFile (hFile=0x1e8) returned 1 [0145.448] SetEndOfFile (hFile=0x1e8) returned 1 [0145.454] SetEndOfFile (hFile=0x1e8) returned 1 [0145.461] SetEndOfFile (hFile=0x1e8) returned 1 [0145.479] SetEndOfFile (hFile=0x1e8) returned 1 [0145.485] SetEndOfFile (hFile=0x1e8) returned 1 [0145.574] SetEndOfFile (hFile=0x1e8) returned 1 [0145.581] SetEndOfFile (hFile=0x1e8) returned 1 [0145.587] SetEndOfFile (hFile=0x1e8) returned 1 [0145.594] SetEndOfFile (hFile=0x1e8) returned 1 [0145.656] SetEndOfFile (hFile=0x1e8) returned 1 [0145.664] SetEndOfFile (hFile=0x1e8) returned 1 [0145.670] SetEndOfFile (hFile=0x1e8) returned 1 [0145.677] SetEndOfFile (hFile=0x1e8) returned 1 [0145.684] SetEndOfFile (hFile=0x1e8) returned 1 [0145.690] SetEndOfFile (hFile=0x1e8) returned 1 [0145.859] SetEndOfFile (hFile=0x1e8) returned 1 [0145.866] SetEndOfFile (hFile=0x1e8) returned 1 [0145.872] SetEndOfFile (hFile=0x1e8) returned 1 [0145.882] SetEndOfFile (hFile=0x1e8) returned 1 [0145.889] SetEndOfFile (hFile=0x1e8) returned 1 [0145.895] SetEndOfFile (hFile=0x1e8) returned 1 [0145.903] SetEndOfFile (hFile=0x1e8) returned 1 [0145.914] SetEndOfFile (hFile=0x1e8) returned 1 [0145.921] SetEndOfFile (hFile=0x1e8) returned 1 [0145.932] SetEndOfFile (hFile=0x1e8) returned 1 [0145.940] SetEndOfFile (hFile=0x1e8) returned 1 [0145.948] SetEndOfFile (hFile=0x1e8) returned 1 [0145.959] SetEndOfFile (hFile=0x1e8) returned 1 [0145.966] SetEndOfFile (hFile=0x1e8) returned 1 [0145.977] SetEndOfFile (hFile=0x1e8) returned 1 [0145.983] SetEndOfFile (hFile=0x1e8) returned 1 [0145.989] SetEndOfFile (hFile=0x1e8) returned 1 [0145.996] SetEndOfFile (hFile=0x1e8) returned 1 [0146.003] SetEndOfFile (hFile=0x1e8) returned 1 [0146.010] SetEndOfFile (hFile=0x1e8) returned 1 [0146.017] SetEndOfFile (hFile=0x1e8) returned 1 [0146.025] SetEndOfFile (hFile=0x1e8) returned 1 [0146.032] SetEndOfFile (hFile=0x1e8) returned 1 [0146.040] SetEndOfFile (hFile=0x1e8) returned 1 [0146.046] SetEndOfFile (hFile=0x1e8) returned 1 [0146.055] SetEndOfFile (hFile=0x1e8) returned 1 [0146.062] SetEndOfFile (hFile=0x1e8) returned 1 [0146.071] SetEndOfFile (hFile=0x1e8) returned 1 [0146.078] SetEndOfFile (hFile=0x1e8) returned 1 [0146.085] SetEndOfFile (hFile=0x1e8) returned 1 [0146.091] SetEndOfFile (hFile=0x1e8) returned 1 [0146.099] SetEndOfFile (hFile=0x1e8) returned 1 [0146.110] SetEndOfFile (hFile=0x1e8) returned 1 [0146.116] SetEndOfFile (hFile=0x1e8) returned 1 [0146.124] SetEndOfFile (hFile=0x1e8) returned 1 [0146.131] SetEndOfFile (hFile=0x1e8) returned 1 [0146.137] SetEndOfFile (hFile=0x1e8) returned 1 [0146.143] SetEndOfFile (hFile=0x1e8) returned 1 [0146.152] SetEndOfFile (hFile=0x1e8) returned 1 [0146.159] SetEndOfFile (hFile=0x1e8) returned 1 [0146.165] SetEndOfFile (hFile=0x1e8) returned 1 [0146.172] SetEndOfFile (hFile=0x1e8) returned 1 [0146.179] SetEndOfFile (hFile=0x1e8) returned 1 [0146.185] SetEndOfFile (hFile=0x1e8) returned 1 [0146.194] SetEndOfFile (hFile=0x1e8) returned 1 [0146.201] SetEndOfFile (hFile=0x1e8) returned 1 [0146.208] SetEndOfFile (hFile=0x1e8) returned 1 [0146.216] SetEndOfFile (hFile=0x1e8) returned 1 [0146.223] SetEndOfFile (hFile=0x1e8) returned 1 [0146.230] SetEndOfFile (hFile=0x1e8) returned 1 [0146.236] SetEndOfFile (hFile=0x1e8) returned 1 [0146.244] SetEndOfFile (hFile=0x1e8) returned 1 [0146.251] SetEndOfFile (hFile=0x1e8) returned 1 [0146.258] SetEndOfFile (hFile=0x1e8) returned 1 [0146.265] SetEndOfFile (hFile=0x1e8) returned 1 [0146.273] SetEndOfFile (hFile=0x1e8) returned 1 [0146.279] SetEndOfFile (hFile=0x1e8) returned 1 [0146.287] SetEndOfFile (hFile=0x1e8) returned 1 [0146.297] SetEndOfFile (hFile=0x1e8) returned 1 [0146.305] SetEndOfFile (hFile=0x1e8) returned 1 [0146.311] SetEndOfFile (hFile=0x1e8) returned 1 [0146.317] SetEndOfFile (hFile=0x1e8) returned 1 [0146.324] SetEndOfFile (hFile=0x1e8) returned 1 [0146.330] SetEndOfFile (hFile=0x1e8) returned 1 [0146.367] SetEndOfFile (hFile=0x1e8) returned 1 [0146.374] SetEndOfFile (hFile=0x1e8) returned 1 [0146.385] SetEndOfFile (hFile=0x1e8) returned 1 [0146.393] SetEndOfFile (hFile=0x1e8) returned 1 [0146.400] SetEndOfFile (hFile=0x1e8) returned 1 [0146.406] SetEndOfFile (hFile=0x1e8) returned 1 [0146.428] SetEndOfFile (hFile=0x1e8) returned 1 [0146.435] SetEndOfFile (hFile=0x1e8) returned 1 [0146.443] SetEndOfFile (hFile=0x1e8) returned 1 [0146.451] SetEndOfFile (hFile=0x1e8) returned 1 [0146.458] SetEndOfFile (hFile=0x1e8) returned 1 [0146.464] SetEndOfFile (hFile=0x1e8) returned 1 [0146.471] SetEndOfFile (hFile=0x1e8) returned 1 [0146.478] SetEndOfFile (hFile=0x1e8) returned 1 [0146.532] SetEndOfFile (hFile=0x1e8) returned 1 [0146.540] SetEndOfFile (hFile=0x1e8) returned 1 [0146.547] SetEndOfFile (hFile=0x1e8) returned 1 [0146.554] SetEndOfFile (hFile=0x1e8) returned 1 [0146.560] SetEndOfFile (hFile=0x1e8) returned 1 [0146.566] SetEndOfFile (hFile=0x1e8) returned 1 [0146.581] SetEndOfFile (hFile=0x1e8) returned 1 [0146.588] SetEndOfFile (hFile=0x1e8) returned 1 [0146.596] SetEndOfFile (hFile=0x1e8) returned 1 [0146.603] SetEndOfFile (hFile=0x1e8) returned 1 [0146.609] SetEndOfFile (hFile=0x1e8) returned 1 [0146.624] SetEndOfFile (hFile=0x1e8) returned 1 [0146.631] SetEndOfFile (hFile=0x1e8) returned 1 [0146.637] SetEndOfFile (hFile=0x1e8) returned 1 [0146.647] SetEndOfFile (hFile=0x1e8) returned 1 [0146.654] SetEndOfFile (hFile=0x1e8) returned 1 [0146.660] SetEndOfFile (hFile=0x1e8) returned 1 [0146.668] SetEndOfFile (hFile=0x1e8) returned 1 [0146.674] SetEndOfFile (hFile=0x1e8) returned 1 [0146.681] SetEndOfFile (hFile=0x1e8) returned 1 [0146.688] SetEndOfFile (hFile=0x1e8) returned 1 [0146.697] SetEndOfFile (hFile=0x1e8) returned 1 [0146.703] SetEndOfFile (hFile=0x1e8) returned 1 [0146.710] SetEndOfFile (hFile=0x1e8) returned 1 [0146.717] SetEndOfFile (hFile=0x1e8) returned 1 [0146.723] SetEndOfFile (hFile=0x1e8) returned 1 [0146.729] SetEndOfFile (hFile=0x1e8) returned 1 [0146.735] SetEndOfFile (hFile=0x1e8) returned 1 [0146.742] SetEndOfFile (hFile=0x1e8) returned 1 [0146.748] SetEndOfFile (hFile=0x1e8) returned 1 [0146.755] SetEndOfFile (hFile=0x1e8) returned 1 [0146.766] SetEndOfFile (hFile=0x1e8) returned 1 [0146.773] SetEndOfFile (hFile=0x1e8) returned 1 [0146.781] SetEndOfFile (hFile=0x1e8) returned 1 [0146.788] SetEndOfFile (hFile=0x1e8) returned 1 [0146.794] SetEndOfFile (hFile=0x1e8) returned 1 [0146.803] SetEndOfFile (hFile=0x1e8) returned 1 [0146.812] SetEndOfFile (hFile=0x1e8) returned 1 [0146.819] SetEndOfFile (hFile=0x1e8) returned 1 [0146.825] SetEndOfFile (hFile=0x1e8) returned 1 [0146.833] SetEndOfFile (hFile=0x1e8) returned 1 [0146.839] SetEndOfFile (hFile=0x1e8) returned 1 [0146.845] SetEndOfFile (hFile=0x1e8) returned 1 [0146.853] SetEndOfFile (hFile=0x1e8) returned 1 [0146.860] SetEndOfFile (hFile=0x1e8) returned 1 [0146.866] SetEndOfFile (hFile=0x1e8) returned 1 [0146.874] SetEndOfFile (hFile=0x1e8) returned 1 [0146.881] SetEndOfFile (hFile=0x1e8) returned 1 [0146.887] SetEndOfFile (hFile=0x1e8) returned 1 [0146.894] SetEndOfFile (hFile=0x1e8) returned 1 [0146.900] SetEndOfFile (hFile=0x1e8) returned 1 [0146.906] SetEndOfFile (hFile=0x1e8) returned 1 [0146.914] SetEndOfFile (hFile=0x1e8) returned 1 [0146.922] SetEndOfFile (hFile=0x1e8) returned 1 [0146.929] SetEndOfFile (hFile=0x1e8) returned 1 [0146.935] SetEndOfFile (hFile=0x1e8) returned 1 [0146.943] SetEndOfFile (hFile=0x1e8) returned 1 [0146.953] SetEndOfFile (hFile=0x1e8) returned 1 [0146.961] SetEndOfFile (hFile=0x1e8) returned 1 [0146.970] SetEndOfFile (hFile=0x1e8) returned 1 [0146.977] SetEndOfFile (hFile=0x1e8) returned 1 [0146.983] SetEndOfFile (hFile=0x1e8) returned 1 [0146.993] SetEndOfFile (hFile=0x1e8) returned 1 [0147.001] SetEndOfFile (hFile=0x1e8) returned 1 [0147.009] SetEndOfFile (hFile=0x1e8) returned 1 [0147.016] SetEndOfFile (hFile=0x1e8) returned 1 [0147.024] SetEndOfFile (hFile=0x1e8) returned 1 [0147.030] SetEndOfFile (hFile=0x1e8) returned 1 [0147.038] SetEndOfFile (hFile=0x1e8) returned 1 [0147.044] SetEndOfFile (hFile=0x1e8) returned 1 [0147.051] SetEndOfFile (hFile=0x1e8) returned 1 [0147.057] SetEndOfFile (hFile=0x1e8) returned 1 [0147.063] SetEndOfFile (hFile=0x1e8) returned 1 [0147.070] SetEndOfFile (hFile=0x1e8) returned 1 [0147.076] SetEndOfFile (hFile=0x1e8) returned 1 [0147.083] SetEndOfFile (hFile=0x1e8) returned 1 [0147.090] SetEndOfFile (hFile=0x1e8) returned 1 [0147.097] SetEndOfFile (hFile=0x1e8) returned 1 [0147.104] SetEndOfFile (hFile=0x1e8) returned 1 [0147.111] SetEndOfFile (hFile=0x1e8) returned 1 [0147.117] SetEndOfFile (hFile=0x1e8) returned 1 [0147.127] SetEndOfFile (hFile=0x1e8) returned 1 [0147.139] SetEndOfFile (hFile=0x1e8) returned 1 [0147.145] SetEndOfFile (hFile=0x1e8) returned 1 [0147.155] SetEndOfFile (hFile=0x1e8) returned 1 [0147.162] SetEndOfFile (hFile=0x1e8) returned 1 [0147.168] SetEndOfFile (hFile=0x1e8) returned 1 [0147.179] SetEndOfFile (hFile=0x1e8) returned 1 [0147.185] SetEndOfFile (hFile=0x1e8) returned 1 [0147.191] SetEndOfFile (hFile=0x1e8) returned 1 [0147.216] SetEndOfFile (hFile=0x1e8) returned 1 [0147.225] SetEndOfFile (hFile=0x1e8) returned 1 [0147.232] SetEndOfFile (hFile=0x1e8) returned 1 [0147.238] SetEndOfFile (hFile=0x1e8) returned 1 [0147.244] SetEndOfFile (hFile=0x1e8) returned 1 [0147.251] SetEndOfFile (hFile=0x1e8) returned 1 [0147.257] SetEndOfFile (hFile=0x1e8) returned 1 [0147.265] SetEndOfFile (hFile=0x1e8) returned 1 [0147.273] SetEndOfFile (hFile=0x1e8) returned 1 [0147.280] SetEndOfFile (hFile=0x1e8) returned 1 [0147.288] SetEndOfFile (hFile=0x1e8) returned 1 [0147.295] SetEndOfFile (hFile=0x1e8) returned 1 [0147.302] SetEndOfFile (hFile=0x1e8) returned 1 [0147.315] SetEndOfFile (hFile=0x1e8) returned 1 [0147.323] SetEndOfFile (hFile=0x1e8) returned 1 [0147.330] SetEndOfFile (hFile=0x1e8) returned 1 [0147.339] SetEndOfFile (hFile=0x1e8) returned 1 [0147.346] SetEndOfFile (hFile=0x1e8) returned 1 [0147.357] SetEndOfFile (hFile=0x1e8) returned 1 [0147.365] SetEndOfFile (hFile=0x1e8) returned 1 [0147.373] SetEndOfFile (hFile=0x1e8) returned 1 [0147.379] SetEndOfFile (hFile=0x1e8) returned 1 [0147.390] SetEndOfFile (hFile=0x1e8) returned 1 [0147.401] SetEndOfFile (hFile=0x1e8) returned 1 [0147.410] SetEndOfFile (hFile=0x1e8) returned 1 [0147.417] SetEndOfFile (hFile=0x1e8) returned 1 [0147.423] SetEndOfFile (hFile=0x1e8) returned 1 [0147.430] SetEndOfFile (hFile=0x1e8) returned 1 [0147.436] SetEndOfFile (hFile=0x1e8) returned 1 [0147.445] SetEndOfFile (hFile=0x1e8) returned 1 [0147.452] SetEndOfFile (hFile=0x1e8) returned 1 [0147.459] SetEndOfFile (hFile=0x1e8) returned 1 [0147.467] SetEndOfFile (hFile=0x1e8) returned 1 [0147.475] SetEndOfFile (hFile=0x1e8) returned 1 [0147.481] SetEndOfFile (hFile=0x1e8) returned 1 [0147.510] SetEndOfFile (hFile=0x1e8) returned 1 [0147.540] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh", nBufferLength=0x105, lpBuffer=0x2fc3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh", lpFilePart=0x0) returned 0x65 [0147.541] FindClose (in: hFindFile=0x3caa80 | out: hFindFile=0x3caa80) returned 1 [0147.542] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh", nBufferLength=0x105, lpBuffer=0x2fc3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh", lpFilePart=0x0) returned 0x65 [0147.543] FindClose (in: hFindFile=0x3caa80 | out: hFindFile=0x3caa80) returned 1 [0147.546] SetEndOfFile (hFile=0x1e8) returned 1 [0147.553] SetEndOfFile (hFile=0x1e8) returned 1 [0147.561] SetEndOfFile (hFile=0x1e8) returned 1 [0147.571] SetEndOfFile (hFile=0x1e8) returned 1 [0147.578] SetEndOfFile (hFile=0x1e8) returned 1 [0147.586] SetEndOfFile (hFile=0x1e8) returned 1 [0147.593] SetEndOfFile (hFile=0x1e8) returned 1 [0147.605] SetEndOfFile (hFile=0x1e8) returned 1 [0147.620] SetEndOfFile (hFile=0x1e8) returned 1 [0147.636] SetEndOfFile (hFile=0x1e8) returned 1 [0147.643] SetEndOfFile (hFile=0x1e8) returned 1 [0147.649] SetEndOfFile (hFile=0x1e8) returned 1 [0147.658] SetEndOfFile (hFile=0x1e8) returned 1 [0147.670] SetEndOfFile (hFile=0x1e8) returned 1 [0147.676] SetEndOfFile (hFile=0x1e8) returned 1 [0147.685] SetEndOfFile (hFile=0x1e8) returned 1 [0147.693] SetEndOfFile (hFile=0x1e8) returned 1 [0147.699] SetEndOfFile (hFile=0x1e8) returned 1 [0147.707] SetEndOfFile (hFile=0x1e8) returned 1 [0147.714] SetEndOfFile (hFile=0x1e8) returned 1 [0147.720] SetEndOfFile (hFile=0x1e8) returned 1 [0147.730] SetEndOfFile (hFile=0x1e8) returned 1 [0147.737] SetEndOfFile (hFile=0x1e8) returned 1 [0147.743] SetEndOfFile (hFile=0x1e8) returned 1 [0147.751] SetEndOfFile (hFile=0x1e8) returned 1 [0147.758] SetEndOfFile (hFile=0x1e8) returned 1 [0147.764] SetEndOfFile (hFile=0x1e8) returned 1 [0147.770] SetEndOfFile (hFile=0x1e8) returned 1 [0147.775] SetEndOfFile (hFile=0x1e8) returned 1 [0147.781] SetEndOfFile (hFile=0x1e8) returned 1 [0147.787] SetEndOfFile (hFile=0x1e8) returned 1 [0147.793] SetEndOfFile (hFile=0x1e8) returned 1 [0147.797] SetEndOfFile (hFile=0x1e8) returned 1 [0147.805] SetEndOfFile (hFile=0x1e8) returned 1 [0147.809] SetEndOfFile (hFile=0x1e8) returned 1 [0147.815] SetEndOfFile (hFile=0x1e8) returned 1 [0147.820] SetEndOfFile (hFile=0x1e8) returned 1 [0147.827] SetEndOfFile (hFile=0x1e8) returned 1 [0147.832] SetEndOfFile (hFile=0x1e8) returned 1 [0147.836] SetEndOfFile (hFile=0x1e8) returned 1 [0147.841] SetEndOfFile (hFile=0x1e8) returned 1 [0147.847] SetEndOfFile (hFile=0x1e8) returned 1 [0147.851] SetEndOfFile (hFile=0x1e8) returned 1 [0147.857] SetEndOfFile (hFile=0x1e8) returned 1 [0147.861] SetEndOfFile (hFile=0x1e8) returned 1 [0147.867] SetEndOfFile (hFile=0x1e8) returned 1 [0147.871] SetEndOfFile (hFile=0x1e8) returned 1 [0147.877] SetEndOfFile (hFile=0x1e8) returned 1 [0147.882] SetEndOfFile (hFile=0x1e8) returned 1 [0147.887] SetEndOfFile (hFile=0x1e8) returned 1 [0147.894] SetEndOfFile (hFile=0x1e8) returned 1 [0147.900] SetEndOfFile (hFile=0x1e8) returned 1 [0147.905] SetEndOfFile (hFile=0x1e8) returned 1 [0147.911] SetEndOfFile (hFile=0x1e8) returned 1 [0147.916] SetEndOfFile (hFile=0x1e8) returned 1 [0147.921] SetEndOfFile (hFile=0x1e8) returned 1 [0147.926] SetEndOfFile (hFile=0x1e8) returned 1 [0147.930] SetEndOfFile (hFile=0x1e8) returned 1 [0147.935] SetEndOfFile (hFile=0x1e8) returned 1 [0147.943] SetEndOfFile (hFile=0x1e8) returned 1 [0147.949] SetEndOfFile (hFile=0x1e8) returned 1 [0147.955] SetEndOfFile (hFile=0x1e8) returned 1 [0147.962] SetEndOfFile (hFile=0x1e8) returned 1 [0147.969] SetEndOfFile (hFile=0x1e8) returned 1 [0147.975] SetEndOfFile (hFile=0x1e8) returned 1 [0147.980] SetEndOfFile (hFile=0x1e8) returned 1 [0147.987] SetEndOfFile (hFile=0x1e8) returned 1 [0147.994] SetEndOfFile (hFile=0x1e8) returned 1 [0147.999] SetEndOfFile (hFile=0x1e8) returned 1 [0148.004] SetEndOfFile (hFile=0x1e8) returned 1 [0148.010] SetEndOfFile (hFile=0x1e8) returned 1 [0148.014] SetEndOfFile (hFile=0x1e8) returned 1 [0148.020] SetEndOfFile (hFile=0x1e8) returned 1 [0148.026] SetEndOfFile (hFile=0x1e8) returned 1 [0148.030] SetEndOfFile (hFile=0x1e8) returned 1 [0148.036] SetEndOfFile (hFile=0x1e8) returned 1 [0148.041] SetEndOfFile (hFile=0x1e8) returned 1 [0148.046] SetEndOfFile (hFile=0x1e8) returned 1 [0148.051] SetEndOfFile (hFile=0x1e8) returned 1 [0148.057] SetEndOfFile (hFile=0x1e8) returned 1 [0148.066] SetEndOfFile (hFile=0x1e8) returned 1 [0148.071] SetEndOfFile (hFile=0x1e8) returned 1 [0148.078] SetEndOfFile (hFile=0x1e8) returned 1 [0148.084] SetEndOfFile (hFile=0x1e8) returned 1 [0148.089] SetEndOfFile (hFile=0x1e8) returned 1 [0148.097] SetEndOfFile (hFile=0x1e8) returned 1 [0148.102] SetEndOfFile (hFile=0x1e8) returned 1 [0148.107] SetEndOfFile (hFile=0x1e8) returned 1 [0148.116] SetEndOfFile (hFile=0x1e8) returned 1 [0148.121] SetEndOfFile (hFile=0x1e8) returned 1 [0148.126] SetEndOfFile (hFile=0x1e8) returned 1 [0148.134] SetEndOfFile (hFile=0x1e8) returned 1 [0148.140] SetEndOfFile (hFile=0x1e8) returned 1 [0148.145] SetEndOfFile (hFile=0x1e8) returned 1 [0148.151] SetEndOfFile (hFile=0x1e8) returned 1 [0148.157] SetEndOfFile (hFile=0x1e8) returned 1 [0148.166] SetEndOfFile (hFile=0x1e8) returned 1 [0148.171] SetEndOfFile (hFile=0x1e8) returned 1 [0148.177] SetEndOfFile (hFile=0x1e8) returned 1 [0148.182] SetEndOfFile (hFile=0x1e8) returned 1 [0148.186] SetEndOfFile (hFile=0x1e8) returned 1 [0148.190] SetEndOfFile (hFile=0x1e8) returned 1 [0148.195] SetEndOfFile (hFile=0x1e8) returned 1 [0148.200] SetEndOfFile (hFile=0x1e8) returned 1 [0148.209] SetEndOfFile (hFile=0x1e8) returned 1 [0148.214] SetEndOfFile (hFile=0x1e8) returned 1 [0148.219] SetEndOfFile (hFile=0x1e8) returned 1 [0148.225] SetEndOfFile (hFile=0x1e8) returned 1 [0148.231] SetEndOfFile (hFile=0x1e8) returned 1 [0148.236] SetEndOfFile (hFile=0x1e8) returned 1 [0148.247] SetEndOfFile (hFile=0x1e8) returned 1 [0148.265] SetEndOfFile (hFile=0x1e8) returned 1 [0148.273] SetEndOfFile (hFile=0x1e8) returned 1 [0148.279] SetEndOfFile (hFile=0x1e8) returned 1 [0148.285] SetEndOfFile (hFile=0x1e8) returned 1 [0148.291] SetEndOfFile (hFile=0x1e8) returned 1 [0148.296] SetEndOfFile (hFile=0x1e8) returned 1 [0154.805] SetEndOfFile (hFile=0x1e8) returned 1 [0154.812] SetEndOfFile (hFile=0x1e8) returned 1 [0154.817] SetEndOfFile (hFile=0x1e8) returned 1 [0154.823] SetEndOfFile (hFile=0x1e8) returned 1 [0154.829] SetEndOfFile (hFile=0x1e8) returned 1 [0154.837] SetEndOfFile (hFile=0x1e8) returned 1 [0154.843] SetEndOfFile (hFile=0x1e8) returned 1 [0154.848] SetEndOfFile (hFile=0x1e8) returned 1 [0154.854] SetEndOfFile (hFile=0x1e8) returned 1 [0154.860] SetEndOfFile (hFile=0x1e8) returned 1 [0154.865] SetEndOfFile (hFile=0x1e8) returned 1 [0154.872] SetEndOfFile (hFile=0x1e8) returned 1 [0154.879] SetEndOfFile (hFile=0x1e8) returned 1 [0154.891] SetEndOfFile (hFile=0x1e8) returned 1 [0154.900] SetEndOfFile (hFile=0x1e8) returned 1 [0154.908] SetEndOfFile (hFile=0x1e8) returned 1 [0154.914] SetEndOfFile (hFile=0x1e8) returned 1 [0154.923] SetEndOfFile (hFile=0x1e8) returned 1 [0154.931] SetEndOfFile (hFile=0x1e8) returned 1 [0154.937] SetEndOfFile (hFile=0x1e8) returned 1 [0154.943] SetEndOfFile (hFile=0x1e8) returned 1 [0154.949] SetEndOfFile (hFile=0x1e8) returned 1 [0154.957] SetEndOfFile (hFile=0x1e8) returned 1 [0154.963] SetEndOfFile (hFile=0x1e8) returned 1 [0154.968] SetEndOfFile (hFile=0x1e8) returned 1 [0154.973] SetEndOfFile (hFile=0x1e8) returned 1 [0154.981] SetEndOfFile (hFile=0x1e8) returned 1 [0154.986] SetEndOfFile (hFile=0x1e8) returned 1 [0154.991] SetEndOfFile (hFile=0x1e8) returned 1 [0154.995] SetEndOfFile (hFile=0x1e8) returned 1 [0155.000] SetEndOfFile (hFile=0x1e8) returned 1 [0155.005] SetEndOfFile (hFile=0x1e8) returned 1 [0155.010] SetEndOfFile (hFile=0x1e8) returned 1 [0155.016] SetEndOfFile (hFile=0x1e8) returned 1 [0155.026] SetEndOfFile (hFile=0x1e8) returned 1 [0155.032] SetEndOfFile (hFile=0x1e8) returned 1 [0155.038] SetEndOfFile (hFile=0x1e8) returned 1 [0155.044] SetEndOfFile (hFile=0x1e8) returned 1 [0155.049] SetEndOfFile (hFile=0x1e8) returned 1 [0155.072] SetEndOfFile (hFile=0x1e8) returned 1 [0155.077] SetEndOfFile (hFile=0x1e8) returned 1 [0155.082] SetEndOfFile (hFile=0x1e8) returned 1 [0155.090] SetEndOfFile (hFile=0x1e8) returned 1 [0155.099] SetEndOfFile (hFile=0x1e8) returned 1 [0155.105] SetEndOfFile (hFile=0x1e8) returned 1 [0155.111] SetEndOfFile (hFile=0x1e8) returned 1 [0155.116] SetEndOfFile (hFile=0x1e8) returned 1 [0155.121] SetEndOfFile (hFile=0x1e8) returned 1 [0155.136] SetEndOfFile (hFile=0x1e8) returned 1 [0155.143] SetEndOfFile (hFile=0x1e8) returned 1 [0155.149] SetEndOfFile (hFile=0x1e8) returned 1 [0155.155] SetEndOfFile (hFile=0x1e8) returned 1 [0155.160] SetEndOfFile (hFile=0x1e8) returned 1 [0155.167] SetEndOfFile (hFile=0x1e8) returned 1 [0155.173] SetEndOfFile (hFile=0x1e8) returned 1 [0155.181] SetEndOfFile (hFile=0x1e8) returned 1 [0155.188] SetEndOfFile (hFile=0x1e8) returned 1 [0155.193] SetEndOfFile (hFile=0x1e8) returned 1 [0155.200] SetEndOfFile (hFile=0x1e8) returned 1 [0155.206] SetEndOfFile (hFile=0x1e8) returned 1 [0155.213] SetEndOfFile (hFile=0x1e8) returned 1 [0155.234] SetEndOfFile (hFile=0x1e8) returned 1 [0155.240] SetEndOfFile (hFile=0x1e8) returned 1 [0155.246] SetEndOfFile (hFile=0x1e8) returned 1 [0155.252] SetEndOfFile (hFile=0x1e8) returned 1 [0155.259] SetEndOfFile (hFile=0x1e8) returned 1 [0155.265] SetEndOfFile (hFile=0x1e8) returned 1 [0155.270] SetEndOfFile (hFile=0x1e8) returned 1 [0155.281] SetEndOfFile (hFile=0x1e8) returned 1 [0155.293] SetEndOfFile (hFile=0x1e8) returned 1 [0155.299] SetEndOfFile (hFile=0x1e8) returned 1 [0155.306] SetEndOfFile (hFile=0x1e8) returned 1 [0155.313] SetEndOfFile (hFile=0x1e8) returned 1 [0155.321] SetEndOfFile (hFile=0x1e8) returned 1 [0155.331] SetEndOfFile (hFile=0x1e8) returned 1 [0155.336] SetEndOfFile (hFile=0x1e8) returned 1 [0155.342] SetEndOfFile (hFile=0x1e8) returned 1 [0155.363] SetEndOfFile (hFile=0x1e8) returned 1 [0155.370] SetEndOfFile (hFile=0x1e8) returned 1 [0155.395] SetEndOfFile (hFile=0x1e8) returned 1 [0155.401] SetEndOfFile (hFile=0x1e8) returned 1 [0155.408] SetEndOfFile (hFile=0x1e8) returned 1 [0155.414] SetEndOfFile (hFile=0x1e8) returned 1 [0155.420] SetEndOfFile (hFile=0x1e8) returned 1 [0155.434] SetEndOfFile (hFile=0x1e8) returned 1 [0155.440] SetEndOfFile (hFile=0x1e8) returned 1 [0155.446] SetEndOfFile (hFile=0x1e8) returned 1 [0155.453] SetEndOfFile (hFile=0x1e8) returned 1 [0155.459] SetEndOfFile (hFile=0x1e8) returned 1 [0155.465] SetEndOfFile (hFile=0x1e8) returned 1 [0155.471] SetEndOfFile (hFile=0x1e8) returned 1 [0155.490] SetEndOfFile (hFile=0x1e8) returned 1 [0155.496] SetEndOfFile (hFile=0x1e8) returned 1 [0155.502] SetEndOfFile (hFile=0x1e8) returned 1 [0155.508] SetEndOfFile (hFile=0x1e8) returned 1 [0155.517] SetEndOfFile (hFile=0x1e8) returned 1 [0155.525] SetEndOfFile (hFile=0x1e8) returned 1 [0155.529] SetEndOfFile (hFile=0x1e8) returned 1 [0155.535] SetEndOfFile (hFile=0x1e8) returned 1 [0155.541] SetEndOfFile (hFile=0x1e8) returned 1 [0155.550] SetEndOfFile (hFile=0x1e8) returned 1 [0155.556] SetEndOfFile (hFile=0x1e8) returned 1 [0155.562] SetEndOfFile (hFile=0x1e8) returned 1 [0155.569] SetEndOfFile (hFile=0x1e8) returned 1 [0155.575] SetEndOfFile (hFile=0x1e8) returned 1 [0155.581] SetEndOfFile (hFile=0x1e8) returned 1 [0155.591] SetEndOfFile (hFile=0x1e8) returned 1 [0155.598] SetEndOfFile (hFile=0x1e8) returned 1 [0155.604] SetEndOfFile (hFile=0x1e8) returned 1 [0155.611] SetEndOfFile (hFile=0x1e8) returned 1 [0155.618] SetEndOfFile (hFile=0x1e8) returned 1 [0155.624] SetEndOfFile (hFile=0x1e8) returned 1 [0155.629] SetEndOfFile (hFile=0x1e8) returned 1 [0155.635] SetEndOfFile (hFile=0x1e8) returned 1 [0155.639] SetEndOfFile (hFile=0x1e8) returned 1 [0155.645] SetEndOfFile (hFile=0x1e8) returned 1 [0155.650] SetEndOfFile (hFile=0x1e8) returned 1 [0155.655] SetEndOfFile (hFile=0x1e8) returned 1 [0155.660] SetEndOfFile (hFile=0x1e8) returned 1 [0155.664] SetEndOfFile (hFile=0x1e8) returned 1 [0155.670] SetEndOfFile (hFile=0x1e8) returned 1 [0155.678] SetEndOfFile (hFile=0x1e8) returned 1 [0155.684] SetEndOfFile (hFile=0x1e8) returned 1 [0155.689] SetEndOfFile (hFile=0x1e8) returned 1 [0155.694] SetEndOfFile (hFile=0x1e8) returned 1 [0155.701] SetEndOfFile (hFile=0x1e8) returned 1 [0155.706] SetEndOfFile (hFile=0x1e8) returned 1 [0155.711] SetEndOfFile (hFile=0x1e8) returned 1 [0155.720] SetEndOfFile (hFile=0x1e8) returned 1 [0155.725] SetEndOfFile (hFile=0x1e8) returned 1 [0155.729] SetEndOfFile (hFile=0x1e8) returned 1 [0155.735] SetEndOfFile (hFile=0x1e8) returned 1 [0155.740] SetEndOfFile (hFile=0x1e8) returned 1 [0155.745] SetEndOfFile (hFile=0x1e8) returned 1 [0155.751] SetEndOfFile (hFile=0x1e8) returned 1 [0155.756] SetEndOfFile (hFile=0x1e8) returned 1 [0155.760] SetEndOfFile (hFile=0x1e8) returned 1 [0155.766] SetEndOfFile (hFile=0x1e8) returned 1 [0155.771] SetEndOfFile (hFile=0x1e8) returned 1 [0155.775] SetEndOfFile (hFile=0x1e8) returned 1 [0155.780] SetEndOfFile (hFile=0x1e8) returned 1 [0155.784] SetEndOfFile (hFile=0x1e8) returned 1 [0155.790] SetEndOfFile (hFile=0x1e8) returned 1 [0155.794] SetEndOfFile (hFile=0x1e8) returned 1 [0155.800] SetEndOfFile (hFile=0x1e8) returned 1 [0155.805] SetEndOfFile (hFile=0x1e8) returned 1 [0155.812] SetEndOfFile (hFile=0x1e8) returned 1 [0155.817] SetEndOfFile (hFile=0x1e8) returned 1 [0155.823] SetEndOfFile (hFile=0x1e8) returned 1 [0155.829] SetEndOfFile (hFile=0x1e8) returned 1 [0155.840] SetEndOfFile (hFile=0x1e8) returned 1 [0155.845] SetEndOfFile (hFile=0x1e8) returned 1 [0155.856] SetEndOfFile (hFile=0x1e8) returned 1 [0155.863] SetEndOfFile (hFile=0x1e8) returned 1 [0155.870] SetEndOfFile (hFile=0x1e8) returned 1 [0155.876] SetEndOfFile (hFile=0x1e8) returned 1 [0155.917] SetEndOfFile (hFile=0x1e8) returned 1 [0155.924] SetEndOfFile (hFile=0x1e8) returned 1 [0155.930] SetEndOfFile (hFile=0x1e8) returned 1 [0155.937] SetEndOfFile (hFile=0x1e8) returned 1 [0155.945] SetEndOfFile (hFile=0x1e8) returned 1 [0155.951] SetEndOfFile (hFile=0x1e8) returned 1 [0155.956] SetEndOfFile (hFile=0x1e8) returned 1 [0155.963] SetEndOfFile (hFile=0x1e8) returned 1 [0155.969] SetEndOfFile (hFile=0x1e8) returned 1 [0155.975] SetEndOfFile (hFile=0x1e8) returned 1 [0155.982] SetEndOfFile (hFile=0x1e8) returned 1 [0155.989] SetEndOfFile (hFile=0x1e8) returned 1 [0155.995] SetEndOfFile (hFile=0x1e8) returned 1 [0156.003] SetEndOfFile (hFile=0x1e8) returned 1 [0156.010] SetEndOfFile (hFile=0x1e8) returned 1 [0156.019] SetEndOfFile (hFile=0x1e8) returned 1 [0156.028] SetEndOfFile (hFile=0x1e8) returned 1 [0156.035] SetEndOfFile (hFile=0x1e8) returned 1 [0156.042] SetEndOfFile (hFile=0x1e8) returned 1 [0156.068] SetEndOfFile (hFile=0x1e8) returned 1 [0156.075] SetEndOfFile (hFile=0x1e8) returned 1 [0156.081] SetEndOfFile (hFile=0x1e8) returned 1 [0156.089] SetEndOfFile (hFile=0x1e8) returned 1 [0156.096] SetEndOfFile (hFile=0x1e8) returned 1 [0156.102] SetEndOfFile (hFile=0x1e8) returned 1 [0156.110] SetEndOfFile (hFile=0x1e8) returned 1 [0156.117] SetEndOfFile (hFile=0x1e8) returned 1 [0156.123] SetEndOfFile (hFile=0x1e8) returned 1 [0156.129] SetEndOfFile (hFile=0x1e8) returned 1 [0156.136] SetEndOfFile (hFile=0x1e8) returned 1 [0156.143] SetEndOfFile (hFile=0x1e8) returned 1 [0156.148] SetEndOfFile (hFile=0x1e8) returned 1 [0156.154] SetEndOfFile (hFile=0x1e8) returned 1 [0156.160] SetEndOfFile (hFile=0x1e8) returned 1 [0156.165] SetEndOfFile (hFile=0x1e8) returned 1 [0156.171] SetEndOfFile (hFile=0x1e8) returned 1 [0156.180] SetEndOfFile (hFile=0x1e8) returned 1 [0156.185] SetEndOfFile (hFile=0x1e8) returned 1 [0156.192] SetEndOfFile (hFile=0x1e8) returned 1 [0156.196] SetEndOfFile (hFile=0x1e8) returned 1 [0156.202] SetEndOfFile (hFile=0x1e8) returned 1 [0156.211] SetEndOfFile (hFile=0x1e8) returned 1 [0156.219] SetEndOfFile (hFile=0x1e8) returned 1 [0156.225] SetEndOfFile (hFile=0x1e8) returned 1 [0156.232] SetEndOfFile (hFile=0x1e8) returned 1 [0156.239] SetEndOfFile (hFile=0x1e8) returned 1 [0156.244] SetEndOfFile (hFile=0x1e8) returned 1 [0156.249] SetEndOfFile (hFile=0x1e8) returned 1 [0156.255] SetEndOfFile (hFile=0x1e8) returned 1 [0156.260] SetEndOfFile (hFile=0x1e8) returned 1 [0156.265] SetEndOfFile (hFile=0x1e8) returned 1 [0156.270] SetEndOfFile (hFile=0x1e8) returned 1 [0156.274] SetEndOfFile (hFile=0x1e8) returned 1 [0156.280] SetEndOfFile (hFile=0x1e8) returned 1 [0156.287] SetEndOfFile (hFile=0x1e8) returned 1 [0156.292] SetEndOfFile (hFile=0x1e8) returned 1 [0156.298] SetEndOfFile (hFile=0x1e8) returned 1 [0156.303] SetEndOfFile (hFile=0x1e8) returned 1 [0156.309] SetEndOfFile (hFile=0x1e8) returned 1 [0156.315] SetEndOfFile (hFile=0x1e8) returned 1 [0156.320] SetEndOfFile (hFile=0x1e8) returned 1 [0156.326] SetEndOfFile (hFile=0x1e8) returned 1 [0156.332] SetEndOfFile (hFile=0x1e8) returned 1 [0156.336] SetEndOfFile (hFile=0x1e8) returned 1 [0156.342] SetEndOfFile (hFile=0x1e8) returned 1 [0156.348] SetEndOfFile (hFile=0x1e8) returned 1 [0156.353] SetEndOfFile (hFile=0x1e8) returned 1 [0156.361] SetEndOfFile (hFile=0x1e8) returned 1 [0156.375] SetEndOfFile (hFile=0x1e8) returned 1 [0156.381] SetEndOfFile (hFile=0x1e8) returned 1 [0156.389] SetEndOfFile (hFile=0x1e8) returned 1 [0156.393] SetEndOfFile (hFile=0x1e8) returned 1 [0156.399] SetEndOfFile (hFile=0x1e8) returned 1 [0156.404] SetEndOfFile (hFile=0x1e8) returned 1 [0156.408] SetEndOfFile (hFile=0x1e8) returned 1 [0156.417] SetEndOfFile (hFile=0x1e8) returned 1 [0156.421] SetEndOfFile (hFile=0x1e8) returned 1 [0156.427] SetEndOfFile (hFile=0x1e8) returned 1 [0156.432] SetEndOfFile (hFile=0x1e8) returned 1 [0156.437] SetEndOfFile (hFile=0x1e8) returned 1 [0156.442] SetEndOfFile (hFile=0x1e8) returned 1 [0156.720] SetEndOfFile (hFile=0x1e8) returned 1 [0156.725] SetEndOfFile (hFile=0x1e8) returned 1 [0156.732] SetEndOfFile (hFile=0x1e8) returned 1 [0156.738] SetEndOfFile (hFile=0x1e8) returned 1 [0156.742] SetEndOfFile (hFile=0x1e8) returned 1 [0156.748] SetEndOfFile (hFile=0x1e8) returned 1 [0156.759] SetEndOfFile (hFile=0x1e8) returned 1 [0156.765] SetEndOfFile (hFile=0x1e8) returned 1 [0156.771] SetEndOfFile (hFile=0x1e8) returned 1 [0156.777] SetEndOfFile (hFile=0x1e8) returned 1 [0156.782] SetEndOfFile (hFile=0x1e8) returned 1 [0156.790] SetEndOfFile (hFile=0x1e8) returned 1 [0156.796] SetEndOfFile (hFile=0x1e8) returned 1 [0156.803] SetEndOfFile (hFile=0x1e8) returned 1 [0156.808] SetEndOfFile (hFile=0x1e8) returned 1 [0156.814] SetEndOfFile (hFile=0x1e8) returned 1 [0156.820] SetEndOfFile (hFile=0x1e8) returned 1 [0156.824] SetEndOfFile (hFile=0x1e8) returned 1 [0156.830] SetEndOfFile (hFile=0x1e8) returned 1 [0156.838] SetEndOfFile (hFile=0x1e8) returned 1 [0156.843] SetEndOfFile (hFile=0x1e8) returned 1 [0156.849] SetEndOfFile (hFile=0x1e8) returned 1 [0156.855] SetEndOfFile (hFile=0x1e8) returned 1 [0156.860] SetEndOfFile (hFile=0x1e8) returned 1 [0156.867] SetEndOfFile (hFile=0x1e8) returned 1 [0156.872] SetEndOfFile (hFile=0x1e8) returned 1 [0156.877] SetEndOfFile (hFile=0x1e8) returned 1 [0156.886] SetEndOfFile (hFile=0x1e8) returned 1 [0156.892] SetEndOfFile (hFile=0x1e8) returned 1 [0156.898] SetEndOfFile (hFile=0x1e8) returned 1 [0156.903] SetEndOfFile (hFile=0x1e8) returned 1 [0156.912] SetEndOfFile (hFile=0x1e8) returned 1 [0156.917] SetEndOfFile (hFile=0x1e8) returned 1 [0156.922] SetEndOfFile (hFile=0x1e8) returned 1 [0156.928] SetEndOfFile (hFile=0x1e8) returned 1 [0156.933] SetEndOfFile (hFile=0x1e8) returned 1 [0156.944] SetEndOfFile (hFile=0x1e8) returned 1 [0156.949] SetEndOfFile (hFile=0x1e8) returned 1 [0156.953] SetEndOfFile (hFile=0x1e8) returned 1 [0156.958] SetEndOfFile (hFile=0x1e8) returned 1 [0156.964] SetEndOfFile (hFile=0x1e8) returned 1 [0156.971] SetEndOfFile (hFile=0x1e8) returned 1 [0156.976] SetEndOfFile (hFile=0x1e8) returned 1 [0156.981] SetEndOfFile (hFile=0x1e8) returned 1 [0156.988] SetEndOfFile (hFile=0x1e8) returned 1 [0156.993] SetEndOfFile (hFile=0x1e8) returned 1 [0156.999] SetEndOfFile (hFile=0x1e8) returned 1 [0157.008] SetEndOfFile (hFile=0x1e8) returned 1 [0157.014] SetEndOfFile (hFile=0x1e8) returned 1 [0157.019] SetEndOfFile (hFile=0x1e8) returned 1 [0157.025] SetEndOfFile (hFile=0x1e8) returned 1 [0157.030] SetEndOfFile (hFile=0x1e8) returned 1 [0157.035] SetEndOfFile (hFile=0x1e8) returned 1 [0157.041] SetEndOfFile (hFile=0x1e8) returned 1 [0157.047] SetEndOfFile (hFile=0x1e8) returned 1 [0157.067] SetEndOfFile (hFile=0x1e8) returned 1 [0157.072] SetEndOfFile (hFile=0x1e8) returned 1 [0157.078] SetEndOfFile (hFile=0x1e8) returned 1 [0157.082] SetEndOfFile (hFile=0x1e8) returned 1 [0157.087] SetEndOfFile (hFile=0x1e8) returned 1 [0157.091] SetEndOfFile (hFile=0x1e8) returned 1 [0157.097] SetEndOfFile (hFile=0x1e8) returned 1 [0157.104] SetEndOfFile (hFile=0x1e8) returned 1 [0157.109] SetEndOfFile (hFile=0x1e8) returned 1 [0157.114] SetEndOfFile (hFile=0x1e8) returned 1 [0157.118] SetEndOfFile (hFile=0x1e8) returned 1 [0157.150] SetEndOfFile (hFile=0x1e8) returned 1 [0157.157] SetEndOfFile (hFile=0x1e8) returned 1 [0157.162] SetEndOfFile (hFile=0x1e8) returned 1 [0157.171] SetEndOfFile (hFile=0x1e8) returned 1 [0157.179] SetEndOfFile (hFile=0x1e8) returned 1 [0157.184] SetEndOfFile (hFile=0x1e8) returned 1 [0157.191] SetEndOfFile (hFile=0x1e8) returned 1 [0157.197] SetEndOfFile (hFile=0x1e8) returned 1 [0157.202] SetEndOfFile (hFile=0x1e8) returned 1 [0157.209] SetEndOfFile (hFile=0x1e8) returned 1 [0157.215] SetEndOfFile (hFile=0x1e8) returned 1 [0157.221] SetEndOfFile (hFile=0x1e8) returned 1 [0157.227] SetEndOfFile (hFile=0x1e8) returned 1 [0157.233] SetEndOfFile (hFile=0x1e8) returned 1 [0157.239] SetEndOfFile (hFile=0x1e8) returned 1 [0157.245] SetEndOfFile (hFile=0x1e8) returned 1 [0157.250] SetEndOfFile (hFile=0x1e8) returned 1 [0157.256] SetEndOfFile (hFile=0x1e8) returned 1 [0157.262] SetEndOfFile (hFile=0x1e8) returned 1 [0157.268] SetEndOfFile (hFile=0x1e8) returned 1 [0157.275] SetEndOfFile (hFile=0x1e8) returned 1 [0157.280] SetEndOfFile (hFile=0x1e8) returned 1 [0157.290] SetEndOfFile (hFile=0x1e8) returned 1 [0157.296] SetEndOfFile (hFile=0x1e8) returned 1 [0157.303] SetEndOfFile (hFile=0x1e8) returned 1 [0157.312] SetEndOfFile (hFile=0x1e8) returned 1 [0157.318] SetEndOfFile (hFile=0x1e8) returned 1 [0157.324] SetEndOfFile (hFile=0x1e8) returned 1 [0157.329] SetEndOfFile (hFile=0x1e8) returned 1 [0157.336] SetEndOfFile (hFile=0x1e8) returned 1 [0157.342] SetEndOfFile (hFile=0x1e8) returned 1 [0157.348] SetEndOfFile (hFile=0x1e8) returned 1 [0157.355] SetEndOfFile (hFile=0x1e8) returned 1 [0157.362] SetEndOfFile (hFile=0x1e8) returned 1 [0157.367] SetEndOfFile (hFile=0x1e8) returned 1 [0157.384] SetEndOfFile (hFile=0x1e8) returned 1 [0157.391] SetEndOfFile (hFile=0x1e8) returned 1 [0157.397] SetEndOfFile (hFile=0x1e8) returned 1 [0157.402] SetEndOfFile (hFile=0x1e8) returned 1 [0157.407] SetEndOfFile (hFile=0x1e8) returned 1 [0157.415] SetEndOfFile (hFile=0x1e8) returned 1 [0157.421] SetEndOfFile (hFile=0x1e8) returned 1 [0157.428] SetEndOfFile (hFile=0x1e8) returned 1 [0157.435] SetEndOfFile (hFile=0x1e8) returned 1 [0157.441] SetEndOfFile (hFile=0x1e8) returned 1 [0157.447] SetEndOfFile (hFile=0x1e8) returned 1 [0157.455] SetEndOfFile (hFile=0x1e8) returned 1 [0157.463] SetEndOfFile (hFile=0x1e8) returned 1 [0157.474] SetEndOfFile (hFile=0x1e8) returned 1 [0157.481] SetEndOfFile (hFile=0x1e8) returned 1 [0157.488] SetEndOfFile (hFile=0x1e8) returned 1 [0157.498] SetEndOfFile (hFile=0x1e8) returned 1 [0157.505] SetEndOfFile (hFile=0x1e8) returned 1 [0157.511] SetEndOfFile (hFile=0x1e8) returned 1 [0157.518] SetEndOfFile (hFile=0x1e8) returned 1 [0157.524] SetEndOfFile (hFile=0x1e8) returned 1 [0157.530] SetEndOfFile (hFile=0x1e8) returned 1 [0157.537] SetEndOfFile (hFile=0x1e8) returned 1 [0157.543] SetEndOfFile (hFile=0x1e8) returned 1 [0157.549] SetEndOfFile (hFile=0x1e8) returned 1 [0157.556] SetEndOfFile (hFile=0x1e8) returned 1 [0157.561] SetEndOfFile (hFile=0x1e8) returned 1 [0157.567] SetEndOfFile (hFile=0x1e8) returned 1 [0157.573] SetEndOfFile (hFile=0x1e8) returned 1 [0157.580] SetEndOfFile (hFile=0x1e8) returned 1 [0157.586] SetEndOfFile (hFile=0x1e8) returned 1 [0157.592] SetEndOfFile (hFile=0x1e8) returned 1 [0157.599] SetEndOfFile (hFile=0x1e8) returned 1 [0157.605] SetEndOfFile (hFile=0x1e8) returned 1 [0157.611] SetEndOfFile (hFile=0x1e8) returned 1 [0157.621] SetEndOfFile (hFile=0x1e8) returned 1 [0157.629] SetEndOfFile (hFile=0x1e8) returned 1 [0157.635] SetEndOfFile (hFile=0x1e8) returned 1 [0157.645] SetEndOfFile (hFile=0x1e8) returned 1 [0157.651] SetEndOfFile (hFile=0x1e8) returned 1 [0157.657] SetEndOfFile (hFile=0x1e8) returned 1 [0157.666] SetEndOfFile (hFile=0x1e8) returned 1 [0157.673] SetEndOfFile (hFile=0x1e8) returned 1 [0157.680] SetEndOfFile (hFile=0x1e8) returned 1 [0157.687] SetEndOfFile (hFile=0x1e8) returned 1 [0157.693] SetEndOfFile (hFile=0x1e8) returned 1 [0157.699] SetEndOfFile (hFile=0x1e8) returned 1 [0157.705] SetEndOfFile (hFile=0x1e8) returned 1 [0157.710] SetEndOfFile (hFile=0x1e8) returned 1 [0157.717] SetEndOfFile (hFile=0x1e8) returned 1 [0157.723] SetEndOfFile (hFile=0x1e8) returned 1 [0157.730] SetEndOfFile (hFile=0x1e8) returned 1 [0157.737] SetEndOfFile (hFile=0x1e8) returned 1 [0157.743] SetEndOfFile (hFile=0x1e8) returned 1 [0157.750] SetEndOfFile (hFile=0x1e8) returned 1 [0157.756] SetEndOfFile (hFile=0x1e8) returned 1 [0157.762] SetEndOfFile (hFile=0x1e8) returned 1 [0157.772] SetEndOfFile (hFile=0x1e8) returned 1 [0157.795] GetFileType (hFile=0x178) returned 0x1 [0157.802] SetEndOfFile (hFile=0x1e8) returned 1 [0157.812] SetEndOfFile (hFile=0x1e8) returned 1 [0157.819] SetEndOfFile (hFile=0x1e8) returned 1 [0157.827] SetEndOfFile (hFile=0x1e8) returned 1 [0157.833] SetEndOfFile (hFile=0x1e8) returned 1 [0157.844] SetEndOfFile (hFile=0x1e8) returned 1 [0157.852] SetEndOfFile (hFile=0x1e8) returned 1 [0157.859] SetEndOfFile (hFile=0x1e8) returned 1 [0157.871] SetEndOfFile (hFile=0x1e8) returned 1 [0157.880] SetEndOfFile (hFile=0x1e8) returned 1 [0157.886] SetEndOfFile (hFile=0x1e8) returned 1 [0157.923] SetEndOfFile (hFile=0x1e8) returned 1 [0157.929] SetEndOfFile (hFile=0x1e8) returned 1 [0157.936] SetEndOfFile (hFile=0x1e8) returned 1 [0157.942] SetEndOfFile (hFile=0x1e8) returned 1 [0157.949] SetEndOfFile (hFile=0x1e8) returned 1 [0157.956] SetEndOfFile (hFile=0x1e8) returned 1 [0157.963] SetEndOfFile (hFile=0x1e8) returned 1 [0157.970] SetEndOfFile (hFile=0x1e8) returned 1 [0157.977] SetEndOfFile (hFile=0x1e8) returned 1 [0157.984] SetEndOfFile (hFile=0x1e8) returned 1 [0157.993] SetEndOfFile (hFile=0x1e8) returned 1 [0158.000] SetEndOfFile (hFile=0x1e8) returned 1 [0158.006] SetEndOfFile (hFile=0x1e8) returned 1 [0158.013] SetEndOfFile (hFile=0x1e8) returned 1 [0158.020] SetEndOfFile (hFile=0x1e8) returned 1 [0158.026] SetEndOfFile (hFile=0x1e8) returned 1 [0158.033] SetEndOfFile (hFile=0x1e8) returned 1 [0158.041] SetEndOfFile (hFile=0x1e8) returned 1 [0158.048] SetEndOfFile (hFile=0x1e8) returned 1 [0158.055] SetEndOfFile (hFile=0x1e8) returned 1 [0158.093] SetEndOfFile (hFile=0x1e8) returned 1 [0158.100] SetEndOfFile (hFile=0x1e8) returned 1 [0158.107] SetEndOfFile (hFile=0x1e8) returned 1 [0158.117] SetEndOfFile (hFile=0x1e8) returned 1 [0158.124] SetEndOfFile (hFile=0x1e8) returned 1 [0158.130] SetEndOfFile (hFile=0x1e8) returned 1 [0158.137] SetEndOfFile (hFile=0x1e8) returned 1 [0158.143] SetEndOfFile (hFile=0x1e8) returned 1 [0158.150] SetEndOfFile (hFile=0x1e8) returned 1 [0158.157] SetEndOfFile (hFile=0x1e8) returned 1 [0158.166] SetEndOfFile (hFile=0x1e8) returned 1 [0158.172] SetEndOfFile (hFile=0x1e8) returned 1 [0158.181] SetEndOfFile (hFile=0x1e8) returned 1 [0158.187] SetEndOfFile (hFile=0x1e8) returned 1 [0158.194] SetEndOfFile (hFile=0x1e8) returned 1 [0158.200] SetEndOfFile (hFile=0x1e8) returned 1 [0158.207] SetEndOfFile (hFile=0x1e8) returned 1 [0158.213] SetEndOfFile (hFile=0x1e8) returned 1 [0158.220] SetEndOfFile (hFile=0x1e8) returned 1 [0158.226] SetEndOfFile (hFile=0x1e8) returned 1 [0158.232] SetEndOfFile (hFile=0x1e8) returned 1 [0158.239] SetEndOfFile (hFile=0x1e8) returned 1 [0158.245] SetEndOfFile (hFile=0x1e8) returned 1 [0158.251] SetEndOfFile (hFile=0x1e8) returned 1 [0158.257] SetEndOfFile (hFile=0x1e8) returned 1 [0158.262] SetEndOfFile (hFile=0x1e8) returned 1 [0158.274] SetEndOfFile (hFile=0x1e8) returned 1 [0158.280] SetEndOfFile (hFile=0x1e8) returned 1 [0158.290] SetEndOfFile (hFile=0x1e8) returned 1 [0158.296] SetEndOfFile (hFile=0x1e8) returned 1 [0158.302] SetEndOfFile (hFile=0x1e8) returned 1 [0158.309] SetEndOfFile (hFile=0x1e8) returned 1 [0158.316] SetEndOfFile (hFile=0x1e8) returned 1 [0158.322] SetEndOfFile (hFile=0x1e8) returned 1 [0158.329] SetEndOfFile (hFile=0x1e8) returned 1 [0158.335] SetEndOfFile (hFile=0x1e8) returned 1 [0158.341] SetEndOfFile (hFile=0x1e8) returned 1 [0158.349] SetEndOfFile (hFile=0x1e8) returned 1 [0158.356] SetEndOfFile (hFile=0x1e8) returned 1 [0158.364] SetEndOfFile (hFile=0x1e8) returned 1 [0158.371] SetEndOfFile (hFile=0x1e8) returned 1 [0158.381] SetEndOfFile (hFile=0x1e8) returned 1 [0158.396] SetEndOfFile (hFile=0x1e8) returned 1 [0158.439] SetEndOfFile (hFile=0x1e8) returned 1 [0158.463] SetEndOfFile (hFile=0x1e8) returned 1 [0158.472] SetEndOfFile (hFile=0x1e8) returned 1 [0158.491] SetEndOfFile (hFile=0x1e8) returned 1 [0158.500] SetEndOfFile (hFile=0x1e8) returned 1 [0158.519] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fc920, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\readme.txt", lpFilePart=0x0) returned 0x69 [0158.521] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fc20c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\readme.txt", lpFilePart=0x0) returned 0x69 [0158.522] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fc20c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\readme.txt", lpFilePart=0x0) returned 0x69 [0158.523] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fc20c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\readme.txt", lpFilePart=0x0) returned 0x69 [0158.525] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fc20c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\readme.txt", lpFilePart=0x0) returned 0x69 [0158.526] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fc20c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\readme.txt", lpFilePart=0x0) returned 0x69 [0158.527] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fc20c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\readme.txt", lpFilePart=0x0) returned 0x69 [0158.529] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\*", lpFindFileData=0x2fc68c | out: lpFindFileData=0x2fc68c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347857c0, ftCreationTime.dwHighDateTime=0x1d75bb1, ftLastAccessTime.dwLowDateTime=0x9549c3d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9549c3d0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3caa80 [0158.530] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\*", lpFindFileData=0x2fc68c | out: lpFindFileData=0x2fc68c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347857c0, ftCreationTime.dwHighDateTime=0x1d75bb1, ftLastAccessTime.dwLowDateTime=0x9549c3d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9549c3d0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3caa80 [0158.547] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0158.549] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt.Poteston", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt.Poteston", lpFilePart=0x0) returned 0x82 [0158.550] SetEndOfFile (hFile=0x1e8) returned 1 [0158.554] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0158.555] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0158.556] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0158.557] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0158.558] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0158.559] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0158.562] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fc684, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0158.595] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\*", lpFindFileData=0x2fc68c | out: lpFindFileData=0x2fc68c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdca4ffc0, ftCreationTime.dwHighDateTime=0x1d751cf, ftLastAccessTime.dwLowDateTime=0x9549c3d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9549c3d0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3caa80 [0158.596] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\*", lpFindFileData=0x2fc68c | out: lpFindFileData=0x2fc68c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdca4ffc0, ftCreationTime.dwHighDateTime=0x1d751cf, ftLastAccessTime.dwLowDateTime=0x9549c3d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9549c3d0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3caa80 [0158.597] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", lpFilePart=0x0) returned 0x70 [0158.598] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt.Poteston", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt.Poteston", lpFilePart=0x0) returned 0x79 [0158.598] SetEndOfFile (hFile=0x1e8) returned 1 [0158.603] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", lpFilePart=0x0) returned 0x70 [0158.604] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", lpFilePart=0x0) returned 0x70 [0158.605] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fc684, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", lpFilePart=0x0) returned 0x70 [0158.612] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\*", lpFindFileData=0x2fc68c | out: lpFindFileData=0x2fc68c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe45bb30, ftCreationTime.dwHighDateTime=0x1d75a0b, ftLastAccessTime.dwLowDateTime=0x954c2530, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x954c2530, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3caa80 [0158.613] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\*", lpFindFileData=0x2fc68c | out: lpFindFileData=0x2fc68c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe45bb30, ftCreationTime.dwHighDateTime=0x1d75a0b, ftLastAccessTime.dwLowDateTime=0x954c2530, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x954c2530, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3caa80 [0158.615] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", lpFilePart=0x0) returned 0x78 [0158.615] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt.Poteston", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt.Poteston", lpFilePart=0x0) returned 0x81 [0158.616] SetEndOfFile (hFile=0x1e8) returned 1 [0158.620] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", lpFilePart=0x0) returned 0x78 [0158.622] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", lpFilePart=0x0) returned 0x78 [0158.623] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", lpFilePart=0x0) returned 0x78 [0158.624] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", lpFilePart=0x0) returned 0x78 [0158.626] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fc684, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", lpFilePart=0x0) returned 0x78 [0158.631] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\*", lpFindFileData=0x2fc68c | out: lpFindFileData=0x2fc68c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347857c0, ftCreationTime.dwHighDateTime=0x1d75bb1, ftLastAccessTime.dwLowDateTime=0x9555aab0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9555aab0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3caa80 [0158.632] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\*", lpFindFileData=0x2fc68c | out: lpFindFileData=0x2fc68c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347857c0, ftCreationTime.dwHighDateTime=0x1d75bb1, ftLastAccessTime.dwLowDateTime=0x9555aab0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9555aab0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3caa80 [0158.635] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0158.637] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt.Poteston", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt.Poteston", lpFilePart=0x0) returned 0x82 [0158.637] SetEndOfFile (hFile=0x1e8) returned 1 [0158.646] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0158.647] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0158.650] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0158.651] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0158.652] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0158.654] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0158.655] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fc684, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0158.659] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\*", lpFindFileData=0x2fc68c | out: lpFindFileData=0x2fc68c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdca4ffc0, ftCreationTime.dwHighDateTime=0x1d751cf, ftLastAccessTime.dwLowDateTime=0x955a6d70, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x955a6d70, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3caa80 [0158.660] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\*", lpFindFileData=0x2fc68c | out: lpFindFileData=0x2fc68c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdca4ffc0, ftCreationTime.dwHighDateTime=0x1d751cf, ftLastAccessTime.dwLowDateTime=0x955a6d70, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x955a6d70, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3caa80 [0158.661] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", lpFilePart=0x0) returned 0x70 [0158.664] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt.Poteston", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt.Poteston", lpFilePart=0x0) returned 0x79 [0158.665] SetEndOfFile (hFile=0x1e8) returned 1 [0158.669] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", lpFilePart=0x0) returned 0x70 [0158.671] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", lpFilePart=0x0) returned 0x70 [0158.673] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fc684, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", lpFilePart=0x0) returned 0x70 [0158.677] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\*", lpFindFileData=0x2fc68c | out: lpFindFileData=0x2fc68c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe45bb30, ftCreationTime.dwHighDateTime=0x1d75a0b, ftLastAccessTime.dwLowDateTime=0x955f3030, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x955f3030, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3caa80 [0158.678] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\*", lpFindFileData=0x2fc68c | out: lpFindFileData=0x2fc68c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe45bb30, ftCreationTime.dwHighDateTime=0x1d75a0b, ftLastAccessTime.dwLowDateTime=0x955f3030, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x955f3030, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3caa80 [0158.679] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", lpFilePart=0x0) returned 0x78 [0158.680] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt.Poteston", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt.Poteston", lpFilePart=0x0) returned 0x81 [0158.681] SetEndOfFile (hFile=0x1e8) returned 1 [0158.685] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", lpFilePart=0x0) returned 0x78 [0158.686] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", lpFilePart=0x0) returned 0x78 [0158.688] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", lpFilePart=0x0) returned 0x78 [0158.689] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", lpFilePart=0x0) returned 0x78 [0158.691] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fc684, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", lpFilePart=0x0) returned 0x78 [0158.700] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\*", lpFindFileData=0x2fc68c | out: lpFindFileData=0x2fc68c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347857c0, ftCreationTime.dwHighDateTime=0x1d75bb1, ftLastAccessTime.dwLowDateTime=0x9563f2f0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9563f2f0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3caa80 [0158.701] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\*", lpFindFileData=0x2fc68c | out: lpFindFileData=0x2fc68c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347857c0, ftCreationTime.dwHighDateTime=0x1d75bb1, ftLastAccessTime.dwLowDateTime=0x9563f2f0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9563f2f0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3caa80 [0158.704] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0158.705] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt.Poteston", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt.Poteston", lpFilePart=0x0) returned 0x82 [0158.705] SetEndOfFile (hFile=0x1e8) returned 1 [0158.708] WriteFile (in: hFile=0x1e8, lpBuffer=0x27c7c54*, nNumberOfBytesToWrite=0x340, lpNumberOfBytesWritten=0x2fc234, lpOverlapped=0x0 | out: lpBuffer=0x27c7c54*, lpNumberOfBytesWritten=0x2fc234*=0x340, lpOverlapped=0x0) returned 1 [0158.710] CloseHandle (hObject=0x1e8) returned 1 [0158.716] CloseHandle (hObject=0x178) returned 1 [0158.734] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0158.734] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0158.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0158.741] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0158.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0158.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0158.747] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0158.750] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fc3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0158.751] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0158.752] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0158.753] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0158.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0158.757] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0158.759] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fc3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0158.762] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0158.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0158.763] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0158.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0158.768] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0158.771] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fc3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0158.773] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0158.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0158.773] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0158.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0158.780] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0158.781] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fc3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0158.782] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0158.782] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0158.783] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0158.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0158.786] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0158.793] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fc684, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0158.793] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fcb9c) returned 1 [0158.793] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x178 [0158.795] GetFileType (hFile=0x178) returned 0x1 [0158.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fcb98) returned 1 [0158.795] GetFileType (hFile=0x178) returned 0x1 [0158.795] WriteFile (in: hFile=0x178, lpBuffer=0x27d565c*, nNumberOfBytesToWrite=0x33e, lpNumberOfBytesWritten=0x2fcc0c, lpOverlapped=0x0 | out: lpBuffer=0x27d565c*, lpNumberOfBytesWritten=0x2fcc0c*=0x33e, lpOverlapped=0x0) returned 1 [0158.797] CloseHandle (hObject=0x178) returned 1 [0158.798] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc8dc) returned 1 [0158.798] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh", nBufferLength=0x105, lpBuffer=0x2fc3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh", lpFilePart=0x0) returned 0x65 [0158.799] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\*", lpFindFileData=0x2fc68c | out: lpFindFileData=0x2fc68c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdca4ffc0, ftCreationTime.dwHighDateTime=0x1d751cf, ftLastAccessTime.dwLowDateTime=0x95665450, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x95665450, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3caa80 [0158.799] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdca4ffc0, ftCreationTime.dwHighDateTime=0x1d751cf, ftLastAccessTime.dwLowDateTime=0x95665450, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x95665450, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0158.799] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876a4050, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876a4050, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876ca1b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xaaf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JH7gB.avi.Poteston", cAlternateFileName="JH7GBA~1.POT")) returned 1 [0158.799] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876ca1b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x95665450, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x95665450, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0158.799] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8773c5d0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8773c5d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9563f2f0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0158.799] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8773c5d0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8773c5d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9563f2f0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 0 [0158.800] FindClose (in: hFindFile=0x3caa80 | out: hFindFile=0x3caa80) returned 1 [0158.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc64c) returned 1 [0158.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc8ac) returned 1 [0158.801] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc8dc) returned 1 [0158.801] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh", nBufferLength=0x105, lpBuffer=0x2fc3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh", lpFilePart=0x0) returned 0x65 [0158.801] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\*", lpFindFileData=0x2fc68c | out: lpFindFileData=0x2fc68c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdca4ffc0, ftCreationTime.dwHighDateTime=0x1d751cf, ftLastAccessTime.dwLowDateTime=0x95665450, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x95665450, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3caa80 [0158.801] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdca4ffc0, ftCreationTime.dwHighDateTime=0x1d751cf, ftLastAccessTime.dwLowDateTime=0x95665450, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x95665450, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0158.801] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876a4050, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876a4050, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876ca1b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xaaf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JH7gB.avi.Poteston", cAlternateFileName="JH7GBA~1.POT")) returned 1 [0158.801] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876ca1b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x95665450, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x95665450, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0158.801] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8773c5d0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8773c5d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9563f2f0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0158.802] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0158.802] FindClose (in: hFindFile=0x3caa80 | out: hFindFile=0x3caa80) returned 1 [0158.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc64c) returned 1 [0158.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc8ac) returned 1 [0158.804] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fc3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", lpFilePart=0x0) returned 0x70 [0158.805] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", lpFilePart=0x0) returned 0x70 [0158.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0158.805] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0158.805] GetFileType (hFile=0x178) returned 0x1 [0158.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc1e4) returned 1 [0158.805] GetFileType (hFile=0x178) returned 0x1 [0158.806] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt.Poteston", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt.Poteston", lpFilePart=0x0) returned 0x79 [0158.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0158.806] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt.Poteston" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1e8 [0158.807] GetFileType (hFile=0x1e8) returned 0x1 [0158.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc1e4) returned 1 [0158.807] GetFileType (hFile=0x1e8) returned 0x1 [0158.808] SetEndOfFile (hFile=0x1e8) returned 1 [0158.811] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x2fc2cc | out: lpFileSizeHigh=0x2fc2cc*=0x0) returned 0x33e [0158.813] ReadFile (in: hFile=0x178, lpBuffer=0x27da4dc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fc270, lpOverlapped=0x0 | out: lpBuffer=0x27da4dc*, lpNumberOfBytesRead=0x2fc270*=0x33e, lpOverlapped=0x0) returned 1 [0158.814] WriteFile (in: hFile=0x1e8, lpBuffer=0x27dbcd4*, nNumberOfBytesToWrite=0x340, lpNumberOfBytesWritten=0x2fc234, lpOverlapped=0x0 | out: lpBuffer=0x27dbcd4*, lpNumberOfBytesWritten=0x2fc234*=0x340, lpOverlapped=0x0) returned 1 [0158.819] CloseHandle (hObject=0x1e8) returned 1 [0158.820] CloseHandle (hObject=0x178) returned 1 [0158.821] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 1 [0158.827] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fc3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", lpFilePart=0x0) returned 0x70 [0158.830] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", lpFilePart=0x0) returned 0x70 [0158.831] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0158.831] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0158.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0158.835] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 0 [0158.838] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fc3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", lpFilePart=0x0) returned 0x70 [0158.841] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", lpFilePart=0x0) returned 0x70 [0158.842] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0158.842] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0158.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0158.850] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 0 [0158.861] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fc684, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", lpFilePart=0x0) returned 0x70 [0158.861] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fcb9c) returned 1 [0158.862] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x178 [0158.862] GetFileType (hFile=0x178) returned 0x1 [0158.862] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fcb98) returned 1 [0158.862] GetFileType (hFile=0x178) returned 0x1 [0158.863] WriteFile (in: hFile=0x178, lpBuffer=0x27e2dec*, nNumberOfBytesToWrite=0x33e, lpNumberOfBytesWritten=0x2fcc0c, lpOverlapped=0x0 | out: lpBuffer=0x27e2dec*, lpNumberOfBytesWritten=0x2fcc0c*=0x33e, lpOverlapped=0x0) returned 1 [0158.865] CloseHandle (hObject=0x178) returned 1 [0158.867] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc8dc) returned 1 [0158.867] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ", nBufferLength=0x105, lpBuffer=0x2fc3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ", lpFilePart=0x0) returned 0x6d [0158.867] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\*", lpFindFileData=0x2fc68c | out: lpFindFileData=0x2fc68c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe45bb30, ftCreationTime.dwHighDateTime=0x1d75a0b, ftLastAccessTime.dwLowDateTime=0x9568b5b0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9568b5b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3caa80 [0158.868] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe45bb30, ftCreationTime.dwHighDateTime=0x1d75a0b, ftLastAccessTime.dwLowDateTime=0x9568b5b0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9568b5b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0158.868] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876ca1b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876ca1b0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876ca1b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x4bc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fK9AO96eyAc5.flv.Poteston", cAlternateFileName="FK9AO9~1.POT")) returned 1 [0158.868] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876f0310, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876f0310, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876f0310, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8ca0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hioo8c.mkv.Poteston", cAlternateFileName="HIOO8C~1.POT")) returned 1 [0158.868] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87716470, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x9568b5b0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9568b5b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0158.868] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8773c5d0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8773c5d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x95665450, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0158.868] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876f0310, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876f0310, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876f0310, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x10450, dwReserved0=0x0, dwReserved1=0x0, cFileName="WhtX.mkv.Poteston", cAlternateFileName="WHTXMK~1.POT")) returned 1 [0158.868] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876f0310, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876f0310, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876f0310, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x10450, dwReserved0=0x0, dwReserved1=0x0, cFileName="WhtX.mkv.Poteston", cAlternateFileName="WHTXMK~1.POT")) returned 0 [0158.868] FindClose (in: hFindFile=0x3caa80 | out: hFindFile=0x3caa80) returned 1 [0158.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc64c) returned 1 [0158.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc8ac) returned 1 [0158.869] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc8dc) returned 1 [0158.869] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ", nBufferLength=0x105, lpBuffer=0x2fc3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ", lpFilePart=0x0) returned 0x6d [0158.869] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\*", lpFindFileData=0x2fc68c | out: lpFindFileData=0x2fc68c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe45bb30, ftCreationTime.dwHighDateTime=0x1d75a0b, ftLastAccessTime.dwLowDateTime=0x9568b5b0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9568b5b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3caa80 [0158.869] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe45bb30, ftCreationTime.dwHighDateTime=0x1d75a0b, ftLastAccessTime.dwLowDateTime=0x9568b5b0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9568b5b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0158.869] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876ca1b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876ca1b0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876ca1b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x4bc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fK9AO96eyAc5.flv.Poteston", cAlternateFileName="FK9AO9~1.POT")) returned 1 [0158.869] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876f0310, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876f0310, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876f0310, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8ca0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hioo8c.mkv.Poteston", cAlternateFileName="HIOO8C~1.POT")) returned 1 [0158.869] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87716470, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x9568b5b0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9568b5b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0158.869] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8773c5d0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8773c5d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x95665450, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0158.869] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876f0310, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876f0310, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876f0310, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x10450, dwReserved0=0x0, dwReserved1=0x0, cFileName="WhtX.mkv.Poteston", cAlternateFileName="WHTXMK~1.POT")) returned 1 [0158.870] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0158.870] FindClose (in: hFindFile=0x3caa80 | out: hFindFile=0x3caa80) returned 1 [0158.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc64c) returned 1 [0158.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc8ac) returned 1 [0158.875] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0158.876] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0158.876] GetFileType (hFile=0x178) returned 0x1 [0158.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc1e4) returned 1 [0158.876] GetFileType (hFile=0x178) returned 0x1 [0158.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0158.876] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt.Poteston" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1e8 [0158.877] GetFileType (hFile=0x1e8) returned 0x1 [0158.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc1e4) returned 1 [0158.877] GetFileType (hFile=0x1e8) returned 0x1 [0158.877] SetEndOfFile (hFile=0x1e8) returned 1 [0158.878] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x2fc2cc | out: lpFileSizeHigh=0x2fc2cc*=0x0) returned 0x33e [0158.878] ReadFile (in: hFile=0x178, lpBuffer=0x27e9cf0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fc270, lpOverlapped=0x0 | out: lpBuffer=0x27e9cf0*, lpNumberOfBytesRead=0x2fc270*=0x33e, lpOverlapped=0x0) returned 1 [0158.878] WriteFile (in: hFile=0x1e8, lpBuffer=0x27eb4dc*, nNumberOfBytesToWrite=0x340, lpNumberOfBytesWritten=0x2fc234, lpOverlapped=0x0 | out: lpBuffer=0x27eb4dc*, lpNumberOfBytesWritten=0x2fc234*=0x340, lpOverlapped=0x0) returned 1 [0158.880] CloseHandle (hObject=0x1e8) returned 1 [0158.880] CloseHandle (hObject=0x178) returned 1 [0158.880] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 1 [0158.883] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0158.883] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0158.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0158.885] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0158.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0158.886] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0158.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0158.888] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0158.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0158.889] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0158.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0158.891] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0158.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0158.893] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0158.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0158.894] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0158.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fcb9c) returned 1 [0158.898] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x178 [0158.899] GetFileType (hFile=0x178) returned 0x1 [0158.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fcb98) returned 1 [0158.899] GetFileType (hFile=0x178) returned 0x1 [0158.899] WriteFile (in: hFile=0x178, lpBuffer=0x27f60f4*, nNumberOfBytesToWrite=0x33e, lpNumberOfBytesWritten=0x2fcc0c, lpOverlapped=0x0 | out: lpBuffer=0x27f60f4*, lpNumberOfBytesWritten=0x2fcc0c*=0x33e, lpOverlapped=0x0) returned 1 [0158.901] CloseHandle (hObject=0x178) returned 1 [0158.902] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd0d8) returned 1 [0158.902] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x178 [0158.902] GetFileType (hFile=0x178) returned 0x1 [0158.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fd0d4) returned 1 [0158.903] GetFileType (hFile=0x178) returned 0x1 [0158.903] WriteFile (in: hFile=0x178, lpBuffer=0x27fa7b4*, nNumberOfBytesToWrite=0x33e, lpNumberOfBytesWritten=0x2fd148, lpOverlapped=0x0 | out: lpBuffer=0x27fa7b4*, lpNumberOfBytesWritten=0x2fd148*=0x33e, lpOverlapped=0x0) returned 1 [0158.904] CloseHandle (hObject=0x178) returned 1 [0158.907] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fce18) returned 1 [0158.907] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd", nBufferLength=0x105, lpBuffer=0x2fc8f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd", lpFilePart=0x0) returned 0x5e [0158.908] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fcbd0 | out: lpFindFileData=0x2fcbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36628860, ftCreationTime.dwHighDateTime=0x1d7550a, ftLastAccessTime.dwLowDateTime=0x9587a790, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9587a790, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0158.908] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fcbd0 | out: lpFindFileData=0x2fcbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87631c30, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87631c30, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x87631c30, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x6910, dwReserved0=0x0, dwReserved1=0x0, cFileName="-aKUFCbuQ.swf.Poteston", cAlternateFileName="-AKUFC~1.POT")) returned 1 [0158.908] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fcbd0 | out: lpFindFileData=0x2fcbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347857c0, ftCreationTime.dwHighDateTime=0x1d75bb1, ftLastAccessTime.dwLowDateTime=0x9576fdf0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9576fdf0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2FDVYf8sCprKRTU", cAlternateFileName="2FDVYF~1")) returned 1 [0158.908] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fcbd0 | out: lpFindFileData=0x2fcbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87716470, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87716470, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x87716470, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xf850, dwReserved0=0x0, dwReserved1=0x0, cFileName="7xfmcye_5js1.mp4.Poteston", cAlternateFileName="7XFMCY~1.POT")) returned 1 [0158.908] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fcbd0 | out: lpFindFileData=0x2fcbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdca4ffc0, ftCreationTime.dwHighDateTime=0x1d751cf, ftLastAccessTime.dwLowDateTime=0x9582e4d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9582e4d0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ajlEoh", cAlternateFileName="")) returned 1 [0158.908] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fcbd0 | out: lpFindFileData=0x2fcbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8773c5d0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8773c5d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x87762730, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xe270, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gvk9fdPwcGOG0hFIUQ.mp4.Poteston", cAlternateFileName="GVK9FD~1.POT")) returned 1 [0158.908] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fcbd0 | out: lpFindFileData=0x2fcbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe45bb30, ftCreationTime.dwHighDateTime=0x1d75a0b, ftLastAccessTime.dwLowDateTime=0x9587a790, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9587a790, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MP8Ghk7Dv AjRZ", cAlternateFileName="MP8GHK~1")) returned 1 [0158.908] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fcbd0 | out: lpFindFileData=0x2fcbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x877ae9f0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x877ae9f0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x877ae9f0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xe4c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="qsRTAwizw4.mp4.Poteston", cAlternateFileName="QSRTAW~1.POT")) returned 1 [0158.908] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fcbd0 | out: lpFindFileData=0x2fcbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87846f70, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x9587a790, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9587a790, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0158.908] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fcbd0 | out: lpFindFileData=0x2fcbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8792b7b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8792b7b0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x954e8690, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0158.908] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fcbd0 | out: lpFindFileData=0x2fcbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x877facb0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x877facb0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x877facb0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x11c30, dwReserved0=0x0, dwReserved1=0x0, cFileName="T6A7_WIE2aYeyKIBMK.mp4.Poteston", cAlternateFileName="T6A7_W~1.POT")) returned 1 [0158.908] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fcbd0 | out: lpFindFileData=0x2fcbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x877facb0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x877facb0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x877facb0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x11c30, dwReserved0=0x0, dwReserved1=0x0, cFileName="T6A7_WIE2aYeyKIBMK.mp4.Poteston", cAlternateFileName="T6A7_W~1.POT")) returned 0 [0158.909] FindClose (in: hFindFile=0x3caa80 | out: hFindFile=0x3caa80) returned 1 [0158.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fcb88) returned 1 [0158.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fcde8) returned 1 [0158.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fce18) returned 1 [0158.909] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd", nBufferLength=0x105, lpBuffer=0x2fc8f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd", lpFilePart=0x0) returned 0x5e [0158.909] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fcbd0 | out: lpFindFileData=0x2fcbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36628860, ftCreationTime.dwHighDateTime=0x1d7550a, ftLastAccessTime.dwLowDateTime=0x9587a790, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9587a790, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0158.909] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fcbd0 | out: lpFindFileData=0x2fcbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87631c30, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87631c30, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x87631c30, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x6910, dwReserved0=0x0, dwReserved1=0x0, cFileName="-aKUFCbuQ.swf.Poteston", cAlternateFileName="-AKUFC~1.POT")) returned 1 [0158.909] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fcbd0 | out: lpFindFileData=0x2fcbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347857c0, ftCreationTime.dwHighDateTime=0x1d75bb1, ftLastAccessTime.dwLowDateTime=0x9576fdf0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9576fdf0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2FDVYf8sCprKRTU", cAlternateFileName="2FDVYF~1")) returned 1 [0158.909] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fcbd0 | out: lpFindFileData=0x2fcbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87716470, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87716470, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x87716470, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xf850, dwReserved0=0x0, dwReserved1=0x0, cFileName="7xfmcye_5js1.mp4.Poteston", cAlternateFileName="7XFMCY~1.POT")) returned 1 [0158.910] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fcbd0 | out: lpFindFileData=0x2fcbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdca4ffc0, ftCreationTime.dwHighDateTime=0x1d751cf, ftLastAccessTime.dwLowDateTime=0x9582e4d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9582e4d0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ajlEoh", cAlternateFileName="")) returned 1 [0158.910] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fcbd0 | out: lpFindFileData=0x2fcbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8773c5d0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8773c5d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x87762730, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xe270, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gvk9fdPwcGOG0hFIUQ.mp4.Poteston", cAlternateFileName="GVK9FD~1.POT")) returned 1 [0158.910] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fcbd0 | out: lpFindFileData=0x2fcbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe45bb30, ftCreationTime.dwHighDateTime=0x1d75a0b, ftLastAccessTime.dwLowDateTime=0x9587a790, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9587a790, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MP8Ghk7Dv AjRZ", cAlternateFileName="MP8GHK~1")) returned 1 [0158.910] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fcbd0 | out: lpFindFileData=0x2fcbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x877ae9f0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x877ae9f0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x877ae9f0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xe4c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="qsRTAwizw4.mp4.Poteston", cAlternateFileName="QSRTAW~1.POT")) returned 1 [0158.910] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fcbd0 | out: lpFindFileData=0x2fcbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87846f70, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x9587a790, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9587a790, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0158.910] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fcbd0 | out: lpFindFileData=0x2fcbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8792b7b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8792b7b0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x954e8690, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0158.910] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fcbd0 | out: lpFindFileData=0x2fcbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x877facb0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x877facb0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x877facb0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x11c30, dwReserved0=0x0, dwReserved1=0x0, cFileName="T6A7_WIE2aYeyKIBMK.mp4.Poteston", cAlternateFileName="T6A7_W~1.POT")) returned 1 [0158.910] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fcbd0 | out: lpFindFileData=0x2fcbd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0158.910] FindClose (in: hFindFile=0x3caa80 | out: hFindFile=0x3caa80) returned 1 [0158.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fcb88) returned 1 [0158.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fcde8) returned 1 [0158.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc8dc) returned 1 [0158.912] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU", nBufferLength=0x105, lpBuffer=0x2fc3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU", lpFilePart=0x0) returned 0x6e [0158.912] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347857c0, ftCreationTime.dwHighDateTime=0x1d75bb1, ftLastAccessTime.dwLowDateTime=0x9576fdf0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9576fdf0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0158.912] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87631c30, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87631c30, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x87657d90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xc1c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D091oF_.swf.Poteston", cAlternateFileName="D091OF~1.POT")) returned 1 [0158.912] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87657d90, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87657d90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x87657d90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xab80, dwReserved0=0x0, dwReserved1=0x0, cFileName="hd1DiUlGE54s6YEpZ.mkv.Poteston", cAlternateFileName="HD1DIU~1.POT")) returned 1 [0158.912] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87657d90, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87657d90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x8767def0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xf050, dwReserved0=0x0, dwReserved1=0x0, cFileName="QFFDU_FwV.avi.Poteston", cAlternateFileName="QFFDU_~1.POT")) returned 1 [0158.912] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8767def0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8767def0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x8767def0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8c80, dwReserved0=0x0, dwReserved1=0x0, cFileName="QZgBMdzaEM6oXeH90ZZ.swf.Poteston", cAlternateFileName="QZGBMD~1.POT")) returned 1 [0158.912] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876a4050, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x9576fdf0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9576fdf0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0158.912] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87716470, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87716470, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x956b1710, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0158.912] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8767def0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8767def0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876a4050, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x189c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="y3LlbNlOVLYa.flv.Poteston", cAlternateFileName="Y3LLBN~1.POT")) returned 1 [0158.912] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8767def0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8767def0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876a4050, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x189c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="y3LlbNlOVLYa.flv.Poteston", cAlternateFileName="Y3LLBN~1.POT")) returned 0 [0158.913] FindClose (in: hFindFile=0x3caa80 | out: hFindFile=0x3caa80) returned 1 [0158.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc64c) returned 1 [0158.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc8ac) returned 1 [0158.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc8dc) returned 1 [0158.913] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU", nBufferLength=0x105, lpBuffer=0x2fc3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU", lpFilePart=0x0) returned 0x6e [0158.913] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347857c0, ftCreationTime.dwHighDateTime=0x1d75bb1, ftLastAccessTime.dwLowDateTime=0x9576fdf0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9576fdf0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0158.913] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87631c30, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87631c30, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x87657d90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xc1c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D091oF_.swf.Poteston", cAlternateFileName="D091OF~1.POT")) returned 1 [0158.913] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87657d90, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87657d90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x87657d90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xab80, dwReserved0=0x0, dwReserved1=0x0, cFileName="hd1DiUlGE54s6YEpZ.mkv.Poteston", cAlternateFileName="HD1DIU~1.POT")) returned 1 [0158.913] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87657d90, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87657d90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x8767def0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xf050, dwReserved0=0x0, dwReserved1=0x0, cFileName="QFFDU_FwV.avi.Poteston", cAlternateFileName="QFFDU_~1.POT")) returned 1 [0158.914] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8767def0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8767def0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x8767def0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8c80, dwReserved0=0x0, dwReserved1=0x0, cFileName="QZgBMdzaEM6oXeH90ZZ.swf.Poteston", cAlternateFileName="QZGBMD~1.POT")) returned 1 [0158.914] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876a4050, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x9576fdf0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9576fdf0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0158.914] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87716470, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87716470, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x956b1710, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0158.914] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8767def0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8767def0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876a4050, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x189c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="y3LlbNlOVLYa.flv.Poteston", cAlternateFileName="Y3LLBN~1.POT")) returned 1 [0158.914] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0158.914] FindClose (in: hFindFile=0x3caa80 | out: hFindFile=0x3caa80) returned 1 [0158.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc64c) returned 1 [0158.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc8ac) returned 1 [0158.916] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0158.916] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0158.916] GetFileType (hFile=0x178) returned 0x1 [0158.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc1e4) returned 1 [0158.916] GetFileType (hFile=0x178) returned 0x1 [0158.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0158.917] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt.Poteston" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1e8 [0158.917] GetFileType (hFile=0x1e8) returned 0x1 [0158.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc1e4) returned 1 [0158.917] GetFileType (hFile=0x1e8) returned 0x1 [0158.917] SetEndOfFile (hFile=0x1e8) returned 1 [0158.919] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x2fc2cc | out: lpFileSizeHigh=0x2fc2cc*=0x0) returned 0x33e [0158.919] ReadFile (in: hFile=0x178, lpBuffer=0x280c4ec, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fc270, lpOverlapped=0x0 | out: lpBuffer=0x280c4ec*, lpNumberOfBytesRead=0x2fc270*=0x33e, lpOverlapped=0x0) returned 1 [0158.919] WriteFile (in: hFile=0x1e8, lpBuffer=0x280dce4*, nNumberOfBytesToWrite=0x340, lpNumberOfBytesWritten=0x2fc234, lpOverlapped=0x0 | out: lpBuffer=0x280dce4*, lpNumberOfBytesWritten=0x2fc234*=0x340, lpOverlapped=0x0) returned 1 [0158.920] CloseHandle (hObject=0x1e8) returned 1 [0158.921] CloseHandle (hObject=0x178) returned 1 [0158.921] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 1 [0158.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0158.923] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0158.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0158.925] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0158.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0158.925] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0158.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0158.927] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0158.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0158.928] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0158.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0158.929] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0158.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0158.930] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0158.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0158.932] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0158.932] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0158.932] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0158.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0158.934] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0158.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0158.934] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0158.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0158.936] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0158.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fcb9c) returned 1 [0158.938] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x178 [0158.938] GetFileType (hFile=0x178) returned 0x1 [0158.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fcb98) returned 1 [0158.939] GetFileType (hFile=0x178) returned 0x1 [0158.939] WriteFile (in: hFile=0x178, lpBuffer=0x281b6dc*, nNumberOfBytesToWrite=0x33e, lpNumberOfBytesWritten=0x2fcc0c, lpOverlapped=0x0 | out: lpBuffer=0x281b6dc*, lpNumberOfBytesWritten=0x2fcc0c*=0x33e, lpOverlapped=0x0) returned 1 [0158.940] CloseHandle (hObject=0x178) returned 1 [0158.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc8dc) returned 1 [0158.941] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh", nBufferLength=0x105, lpBuffer=0x2fc3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh", lpFilePart=0x0) returned 0x65 [0158.941] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdca4ffc0, ftCreationTime.dwHighDateTime=0x1d751cf, ftLastAccessTime.dwLowDateTime=0x9582e4d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9582e4d0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0158.942] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876a4050, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876a4050, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876ca1b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xaaf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JH7gB.avi.Poteston", cAlternateFileName="JH7GBA~1.POT")) returned 1 [0158.942] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876ca1b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x9582e4d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9582e4d0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0158.942] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8773c5d0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8773c5d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x957bc0b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0158.942] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8773c5d0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8773c5d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x957bc0b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 0 [0158.942] FindClose (in: hFindFile=0x3caa80 | out: hFindFile=0x3caa80) returned 1 [0158.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc64c) returned 1 [0158.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc8ac) returned 1 [0158.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc8dc) returned 1 [0158.942] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh", nBufferLength=0x105, lpBuffer=0x2fc3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh", lpFilePart=0x0) returned 0x65 [0158.943] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdca4ffc0, ftCreationTime.dwHighDateTime=0x1d751cf, ftLastAccessTime.dwLowDateTime=0x9582e4d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9582e4d0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0158.943] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876a4050, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876a4050, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876ca1b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xaaf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JH7gB.avi.Poteston", cAlternateFileName="JH7GBA~1.POT")) returned 1 [0158.943] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876ca1b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x9582e4d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9582e4d0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0158.943] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8773c5d0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8773c5d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x957bc0b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0158.943] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0158.943] FindClose (in: hFindFile=0x3caa80 | out: hFindFile=0x3caa80) returned 1 [0158.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc64c) returned 1 [0158.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc8ac) returned 1 [0158.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0158.944] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0158.944] GetFileType (hFile=0x178) returned 0x1 [0158.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc1e4) returned 1 [0158.944] GetFileType (hFile=0x178) returned 0x1 [0158.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0158.944] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt.Poteston" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1e8 [0158.945] GetFileType (hFile=0x1e8) returned 0x1 [0158.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc1e4) returned 1 [0158.945] GetFileType (hFile=0x1e8) returned 0x1 [0158.945] SetEndOfFile (hFile=0x1e8) returned 1 [0158.946] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x2fc2cc | out: lpFileSizeHigh=0x2fc2cc*=0x0) returned 0x33e [0158.946] ReadFile (in: hFile=0x178, lpBuffer=0x282055c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fc270, lpOverlapped=0x0 | out: lpBuffer=0x282055c*, lpNumberOfBytesRead=0x2fc270*=0x33e, lpOverlapped=0x0) returned 1 [0158.946] WriteFile (in: hFile=0x1e8, lpBuffer=0x2821d54*, nNumberOfBytesToWrite=0x340, lpNumberOfBytesWritten=0x2fc234, lpOverlapped=0x0 | out: lpBuffer=0x2821d54*, lpNumberOfBytesWritten=0x2fc234*=0x340, lpOverlapped=0x0) returned 1 [0158.948] CloseHandle (hObject=0x1e8) returned 1 [0158.948] CloseHandle (hObject=0x178) returned 1 [0158.948] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 1 [0158.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0158.950] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0158.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0158.952] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 0 [0158.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0158.952] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0158.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0158.954] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 0 [0158.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fcb9c) returned 1 [0158.954] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x178 [0158.955] GetFileType (hFile=0x178) returned 0x1 [0158.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fcb98) returned 1 [0158.955] GetFileType (hFile=0x178) returned 0x1 [0158.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc8dc) returned 1 [0158.957] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe45bb30, ftCreationTime.dwHighDateTime=0x1d75a0b, ftLastAccessTime.dwLowDateTime=0x9587a790, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9587a790, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0158.958] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876ca1b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876ca1b0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876ca1b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x4bc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fK9AO96eyAc5.flv.Poteston", cAlternateFileName="FK9AO9~1.POT")) returned 1 [0158.958] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876f0310, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876f0310, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876f0310, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8ca0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hioo8c.mkv.Poteston", cAlternateFileName="HIOO8C~1.POT")) returned 1 [0158.958] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87716470, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x9587a790, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9587a790, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0158.958] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8773c5d0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8773c5d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x95854630, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0158.958] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876f0310, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876f0310, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876f0310, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x10450, dwReserved0=0x0, dwReserved1=0x0, cFileName="WhtX.mkv.Poteston", cAlternateFileName="WHTXMK~1.POT")) returned 1 [0158.958] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876f0310, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876f0310, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876f0310, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x10450, dwReserved0=0x0, dwReserved1=0x0, cFileName="WhtX.mkv.Poteston", cAlternateFileName="WHTXMK~1.POT")) returned 0 [0158.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc64c) returned 1 [0158.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc8ac) returned 1 [0158.958] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc8dc) returned 1 [0158.958] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe45bb30, ftCreationTime.dwHighDateTime=0x1d75a0b, ftLastAccessTime.dwLowDateTime=0x9587a790, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9587a790, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0158.958] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876ca1b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876ca1b0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876ca1b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x4bc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fK9AO96eyAc5.flv.Poteston", cAlternateFileName="FK9AO9~1.POT")) returned 1 [0158.959] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876f0310, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876f0310, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876f0310, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8ca0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hioo8c.mkv.Poteston", cAlternateFileName="HIOO8C~1.POT")) returned 1 [0158.959] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87716470, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x9587a790, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9587a790, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0158.959] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8773c5d0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8773c5d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x95854630, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0158.959] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876f0310, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876f0310, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876f0310, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x10450, dwReserved0=0x0, dwReserved1=0x0, cFileName="WhtX.mkv.Poteston", cAlternateFileName="WHTXMK~1.POT")) returned 1 [0158.959] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0158.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc64c) returned 1 [0158.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc8ac) returned 1 [0158.959] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0158.960] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0158.960] GetFileType (hFile=0x178) returned 0x1 [0158.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc1e4) returned 1 [0158.960] GetFileType (hFile=0x178) returned 0x1 [0158.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0158.960] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt.Poteston" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1e8 [0158.961] GetFileType (hFile=0x1e8) returned 0x1 [0158.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc1e4) returned 1 [0158.961] GetFileType (hFile=0x1e8) returned 0x1 [0158.961] SetEndOfFile (hFile=0x1e8) returned 1 [0158.962] ReadFile (in: hFile=0x178, lpBuffer=0x282fd70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fc270, lpOverlapped=0x0 | out: lpBuffer=0x282fd70*, lpNumberOfBytesRead=0x2fc270*=0x33e, lpOverlapped=0x0) returned 1 [0158.963] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 1 [0158.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0158.965] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0158.966] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0158.966] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0158.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0158.967] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0158.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0158.969] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0158.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0158.969] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0158.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0158.971] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0158.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0158.971] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0158.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0158.973] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0158.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fcb9c) returned 1 [0158.973] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x178 [0158.974] GetFileType (hFile=0x178) returned 0x1 [0158.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fcb98) returned 1 [0158.974] GetFileType (hFile=0x178) returned 0x1 [0158.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc8dc) returned 1 [0158.976] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347857c0, ftCreationTime.dwHighDateTime=0x1d75bb1, ftLastAccessTime.dwLowDateTime=0x958ecbb0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x958ecbb0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0158.976] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87631c30, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87631c30, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x87657d90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xc1c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D091oF_.swf.Poteston", cAlternateFileName="D091OF~1.POT")) returned 1 [0158.976] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87657d90, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87657d90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x87657d90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xab80, dwReserved0=0x0, dwReserved1=0x0, cFileName="hd1DiUlGE54s6YEpZ.mkv.Poteston", cAlternateFileName="HD1DIU~1.POT")) returned 1 [0158.976] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87657d90, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87657d90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x8767def0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xf050, dwReserved0=0x0, dwReserved1=0x0, cFileName="QFFDU_FwV.avi.Poteston", cAlternateFileName="QFFDU_~1.POT")) returned 1 [0158.977] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8767def0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8767def0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x8767def0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8c80, dwReserved0=0x0, dwReserved1=0x0, cFileName="QZgBMdzaEM6oXeH90ZZ.swf.Poteston", cAlternateFileName="QZGBMD~1.POT")) returned 1 [0158.977] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876a4050, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x958ecbb0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x958ecbb0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0158.977] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87716470, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87716470, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x958a08f0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0158.977] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8767def0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8767def0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876a4050, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x189c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="y3LlbNlOVLYa.flv.Poteston", cAlternateFileName="Y3LLBN~1.POT")) returned 1 [0158.977] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8767def0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8767def0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876a4050, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x189c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="y3LlbNlOVLYa.flv.Poteston", cAlternateFileName="Y3LLBN~1.POT")) returned 0 [0158.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc64c) returned 1 [0158.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc8ac) returned 1 [0158.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc8dc) returned 1 [0158.977] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347857c0, ftCreationTime.dwHighDateTime=0x1d75bb1, ftLastAccessTime.dwLowDateTime=0x958ecbb0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x958ecbb0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0158.978] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87631c30, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87631c30, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x87657d90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xc1c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D091oF_.swf.Poteston", cAlternateFileName="D091OF~1.POT")) returned 1 [0158.978] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87657d90, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87657d90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x87657d90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xab80, dwReserved0=0x0, dwReserved1=0x0, cFileName="hd1DiUlGE54s6YEpZ.mkv.Poteston", cAlternateFileName="HD1DIU~1.POT")) returned 1 [0158.978] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87657d90, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87657d90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x8767def0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xf050, dwReserved0=0x0, dwReserved1=0x0, cFileName="QFFDU_FwV.avi.Poteston", cAlternateFileName="QFFDU_~1.POT")) returned 1 [0158.978] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8767def0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8767def0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x8767def0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8c80, dwReserved0=0x0, dwReserved1=0x0, cFileName="QZgBMdzaEM6oXeH90ZZ.swf.Poteston", cAlternateFileName="QZGBMD~1.POT")) returned 1 [0158.978] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876a4050, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x958ecbb0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x958ecbb0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0158.978] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87716470, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87716470, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x958a08f0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0158.978] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8767def0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8767def0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876a4050, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x189c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="y3LlbNlOVLYa.flv.Poteston", cAlternateFileName="Y3LLBN~1.POT")) returned 1 [0158.978] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0158.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc64c) returned 1 [0158.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc8ac) returned 1 [0158.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0158.979] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0158.980] GetFileType (hFile=0x178) returned 0x1 [0158.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc1e4) returned 1 [0158.980] GetFileType (hFile=0x178) returned 0x1 [0158.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0158.980] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt.Poteston" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1e8 [0158.980] GetFileType (hFile=0x1e8) returned 0x1 [0158.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc1e4) returned 1 [0158.980] GetFileType (hFile=0x1e8) returned 0x1 [0158.980] SetEndOfFile (hFile=0x1e8) returned 1 [0158.982] ReadFile (in: hFile=0x178, lpBuffer=0x28499c4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fc270, lpOverlapped=0x0 | out: lpBuffer=0x28499c4*, lpNumberOfBytesRead=0x2fc270*=0x33e, lpOverlapped=0x0) returned 1 [0158.983] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 1 [0158.986] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0158.986] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0158.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0158.988] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0158.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0158.988] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0158.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0158.990] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0158.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0158.990] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0158.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0158.991] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0158.992] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0158.992] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0158.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0158.993] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0158.994] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0158.994] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0158.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0158.995] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0158.995] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0158.996] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0158.997] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0158.997] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0158.998] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fcb9c) returned 1 [0158.998] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x178 [0158.998] GetFileType (hFile=0x178) returned 0x1 [0158.998] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fcb98) returned 1 [0158.998] GetFileType (hFile=0x178) returned 0x1 [0159.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc8dc) returned 1 [0159.001] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdca4ffc0, ftCreationTime.dwHighDateTime=0x1d751cf, ftLastAccessTime.dwLowDateTime=0x95912d10, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x95912d10, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.001] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876a4050, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876a4050, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876ca1b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xaaf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JH7gB.avi.Poteston", cAlternateFileName="JH7GBA~1.POT")) returned 1 [0159.001] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876ca1b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x95912d10, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x95912d10, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0159.001] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8773c5d0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8773c5d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x958ecbb0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0159.001] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8773c5d0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8773c5d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x958ecbb0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 0 [0159.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc64c) returned 1 [0159.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc8ac) returned 1 [0159.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc8dc) returned 1 [0159.002] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdca4ffc0, ftCreationTime.dwHighDateTime=0x1d751cf, ftLastAccessTime.dwLowDateTime=0x95912d10, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x95912d10, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.002] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876a4050, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876a4050, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876ca1b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xaaf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JH7gB.avi.Poteston", cAlternateFileName="JH7GBA~1.POT")) returned 1 [0159.002] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876ca1b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x95912d10, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x95912d10, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0159.002] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8773c5d0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8773c5d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x958ecbb0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0159.002] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0159.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc64c) returned 1 [0159.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc8ac) returned 1 [0159.002] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0159.003] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0159.003] GetFileType (hFile=0x178) returned 0x1 [0159.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc1e4) returned 1 [0159.003] GetFileType (hFile=0x178) returned 0x1 [0159.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0159.003] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt.Poteston" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1e8 [0159.003] GetFileType (hFile=0x1e8) returned 0x1 [0159.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc1e4) returned 1 [0159.003] GetFileType (hFile=0x1e8) returned 0x1 [0159.003] SetEndOfFile (hFile=0x1e8) returned 1 [0159.005] ReadFile (in: hFile=0x178, lpBuffer=0x285da34, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fc270, lpOverlapped=0x0 | out: lpBuffer=0x285da34*, lpNumberOfBytesRead=0x2fc270*=0x33e, lpOverlapped=0x0) returned 1 [0159.006] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 1 [0159.008] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0159.008] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0159.009] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 0 [0159.010] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0159.010] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0159.012] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 0 [0159.012] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fcb9c) returned 1 [0159.012] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x178 [0159.013] GetFileType (hFile=0x178) returned 0x1 [0159.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fcb98) returned 1 [0159.013] GetFileType (hFile=0x178) returned 0x1 [0159.014] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc8dc) returned 1 [0159.015] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe45bb30, ftCreationTime.dwHighDateTime=0x1d75a0b, ftLastAccessTime.dwLowDateTime=0x95938e70, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x95938e70, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.015] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876ca1b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876ca1b0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876ca1b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x4bc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fK9AO96eyAc5.flv.Poteston", cAlternateFileName="FK9AO9~1.POT")) returned 1 [0159.015] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876f0310, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876f0310, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876f0310, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8ca0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hioo8c.mkv.Poteston", cAlternateFileName="HIOO8C~1.POT")) returned 1 [0159.015] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87716470, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x95938e70, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x95938e70, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0159.015] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8773c5d0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8773c5d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x95912d10, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0159.015] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876f0310, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876f0310, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876f0310, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x10450, dwReserved0=0x0, dwReserved1=0x0, cFileName="WhtX.mkv.Poteston", cAlternateFileName="WHTXMK~1.POT")) returned 1 [0159.015] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876f0310, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876f0310, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876f0310, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x10450, dwReserved0=0x0, dwReserved1=0x0, cFileName="WhtX.mkv.Poteston", cAlternateFileName="WHTXMK~1.POT")) returned 0 [0159.015] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc64c) returned 1 [0159.015] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc8ac) returned 1 [0159.015] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc8dc) returned 1 [0159.016] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe45bb30, ftCreationTime.dwHighDateTime=0x1d75a0b, ftLastAccessTime.dwLowDateTime=0x95938e70, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x95938e70, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.016] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876ca1b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876ca1b0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876ca1b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x4bc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fK9AO96eyAc5.flv.Poteston", cAlternateFileName="FK9AO9~1.POT")) returned 1 [0159.016] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876f0310, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876f0310, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876f0310, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8ca0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hioo8c.mkv.Poteston", cAlternateFileName="HIOO8C~1.POT")) returned 1 [0159.016] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87716470, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x95938e70, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x95938e70, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0159.016] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8773c5d0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8773c5d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x95912d10, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0159.016] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876f0310, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876f0310, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876f0310, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x10450, dwReserved0=0x0, dwReserved1=0x0, cFileName="WhtX.mkv.Poteston", cAlternateFileName="WHTXMK~1.POT")) returned 1 [0159.016] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0159.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc64c) returned 1 [0159.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc8ac) returned 1 [0159.017] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0159.017] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0159.017] GetFileType (hFile=0x178) returned 0x1 [0159.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc1e4) returned 1 [0159.017] GetFileType (hFile=0x178) returned 0x1 [0159.017] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0159.017] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt.Poteston" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1e8 [0159.018] GetFileType (hFile=0x1e8) returned 0x1 [0159.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc1e4) returned 1 [0159.018] GetFileType (hFile=0x1e8) returned 0x1 [0159.018] SetEndOfFile (hFile=0x1e8) returned 1 [0159.020] ReadFile (in: hFile=0x178, lpBuffer=0x286d248, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fc270, lpOverlapped=0x0 | out: lpBuffer=0x286d248*, lpNumberOfBytesRead=0x2fc270*=0x33e, lpOverlapped=0x0) returned 1 [0159.022] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 1 [0159.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0159.023] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0159.025] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0159.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0159.025] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0159.027] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0159.027] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0159.027] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0159.029] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0159.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0159.029] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0159.030] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0159.031] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fcb9c) returned 1 [0159.031] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x178 [0159.032] GetFileType (hFile=0x178) returned 0x1 [0159.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fcb98) returned 1 [0159.032] GetFileType (hFile=0x178) returned 0x1 [0159.034] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc8dc) returned 1 [0159.034] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347857c0, ftCreationTime.dwHighDateTime=0x1d75bb1, ftLastAccessTime.dwLowDateTime=0x9595efd0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9595efd0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.034] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87631c30, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87631c30, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x87657d90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xc1c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D091oF_.swf.Poteston", cAlternateFileName="D091OF~1.POT")) returned 1 [0159.034] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87657d90, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87657d90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x87657d90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xab80, dwReserved0=0x0, dwReserved1=0x0, cFileName="hd1DiUlGE54s6YEpZ.mkv.Poteston", cAlternateFileName="HD1DIU~1.POT")) returned 1 [0159.034] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87657d90, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87657d90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x8767def0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xf050, dwReserved0=0x0, dwReserved1=0x0, cFileName="QFFDU_FwV.avi.Poteston", cAlternateFileName="QFFDU_~1.POT")) returned 1 [0159.034] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8767def0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8767def0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x8767def0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8c80, dwReserved0=0x0, dwReserved1=0x0, cFileName="QZgBMdzaEM6oXeH90ZZ.swf.Poteston", cAlternateFileName="QZGBMD~1.POT")) returned 1 [0159.034] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876a4050, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x9595efd0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x95985130, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0159.034] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87716470, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87716470, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x95938e70, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0159.034] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8767def0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8767def0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876a4050, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x189c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="y3LlbNlOVLYa.flv.Poteston", cAlternateFileName="Y3LLBN~1.POT")) returned 1 [0159.034] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8767def0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8767def0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876a4050, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x189c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="y3LlbNlOVLYa.flv.Poteston", cAlternateFileName="Y3LLBN~1.POT")) returned 0 [0159.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc64c) returned 1 [0159.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc8ac) returned 1 [0159.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc8dc) returned 1 [0159.035] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347857c0, ftCreationTime.dwHighDateTime=0x1d75bb1, ftLastAccessTime.dwLowDateTime=0x9595efd0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9595efd0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.035] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87631c30, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87631c30, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x87657d90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xc1c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D091oF_.swf.Poteston", cAlternateFileName="D091OF~1.POT")) returned 1 [0159.035] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87657d90, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87657d90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x87657d90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xab80, dwReserved0=0x0, dwReserved1=0x0, cFileName="hd1DiUlGE54s6YEpZ.mkv.Poteston", cAlternateFileName="HD1DIU~1.POT")) returned 1 [0159.035] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87657d90, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87657d90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x8767def0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xf050, dwReserved0=0x0, dwReserved1=0x0, cFileName="QFFDU_FwV.avi.Poteston", cAlternateFileName="QFFDU_~1.POT")) returned 1 [0159.035] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8767def0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8767def0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x8767def0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8c80, dwReserved0=0x0, dwReserved1=0x0, cFileName="QZgBMdzaEM6oXeH90ZZ.swf.Poteston", cAlternateFileName="QZGBMD~1.POT")) returned 1 [0159.035] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876a4050, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x9595efd0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x95985130, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0159.035] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87716470, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87716470, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x95938e70, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0159.036] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8767def0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8767def0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876a4050, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x189c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="y3LlbNlOVLYa.flv.Poteston", cAlternateFileName="Y3LLBN~1.POT")) returned 1 [0159.036] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0159.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc64c) returned 1 [0159.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc8ac) returned 1 [0159.037] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0159.037] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0159.037] GetFileType (hFile=0x178) returned 0x1 [0159.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc1e4) returned 1 [0159.037] GetFileType (hFile=0x178) returned 0x1 [0159.037] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0159.037] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt.Poteston" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1e8 [0159.038] GetFileType (hFile=0x1e8) returned 0x1 [0159.038] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc1e4) returned 1 [0159.038] GetFileType (hFile=0x1e8) returned 0x1 [0159.038] SetEndOfFile (hFile=0x1e8) returned 1 [0159.039] ReadFile (in: hFile=0x178, lpBuffer=0x2886ea8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fc270, lpOverlapped=0x0 | out: lpBuffer=0x2886ea8*, lpNumberOfBytesRead=0x2fc270*=0x33e, lpOverlapped=0x0) returned 1 [0159.040] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 1 [0159.042] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0159.042] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0159.044] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0159.044] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0159.045] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.046] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0159.046] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0159.047] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.047] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0159.048] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0159.049] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.049] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0159.049] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0159.051] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.051] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0159.051] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0159.052] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.053] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fcb9c) returned 1 [0159.053] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x178 [0159.053] GetFileType (hFile=0x178) returned 0x1 [0159.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fcb98) returned 1 [0159.054] GetFileType (hFile=0x178) returned 0x1 [0159.055] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc8dc) returned 1 [0159.055] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdca4ffc0, ftCreationTime.dwHighDateTime=0x1d751cf, ftLastAccessTime.dwLowDateTime=0x95985130, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x95985130, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.055] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876a4050, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876a4050, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876ca1b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xaaf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JH7gB.avi.Poteston", cAlternateFileName="JH7GBA~1.POT")) returned 1 [0159.056] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876ca1b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x95985130, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x95985130, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0159.056] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8773c5d0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8773c5d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x95985130, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0159.056] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8773c5d0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8773c5d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x95985130, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 0 [0159.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc64c) returned 1 [0159.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc8ac) returned 1 [0159.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc8dc) returned 1 [0159.056] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdca4ffc0, ftCreationTime.dwHighDateTime=0x1d751cf, ftLastAccessTime.dwLowDateTime=0x95985130, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x95985130, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.056] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876a4050, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876a4050, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876ca1b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xaaf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JH7gB.avi.Poteston", cAlternateFileName="JH7GBA~1.POT")) returned 1 [0159.056] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876ca1b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x95985130, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x95985130, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0159.056] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8773c5d0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8773c5d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x95985130, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0159.056] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0159.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc64c) returned 1 [0159.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc8ac) returned 1 [0159.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0159.057] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0159.057] GetFileType (hFile=0x178) returned 0x1 [0159.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc1e4) returned 1 [0159.057] GetFileType (hFile=0x178) returned 0x1 [0159.058] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0159.058] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt.Poteston" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1e8 [0159.058] GetFileType (hFile=0x1e8) returned 0x1 [0159.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc1e4) returned 1 [0159.058] GetFileType (hFile=0x1e8) returned 0x1 [0159.058] SetEndOfFile (hFile=0x1e8) returned 1 [0159.059] ReadFile (in: hFile=0x178, lpBuffer=0x289af18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fc270, lpOverlapped=0x0 | out: lpBuffer=0x289af18*, lpNumberOfBytesRead=0x2fc270*=0x33e, lpOverlapped=0x0) returned 1 [0159.060] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 1 [0159.062] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0159.063] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0159.064] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 0 [0159.065] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0159.065] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0159.066] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 0 [0159.066] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fcb9c) returned 1 [0159.066] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x178 [0159.067] GetFileType (hFile=0x178) returned 0x1 [0159.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fcb98) returned 1 [0159.067] GetFileType (hFile=0x178) returned 0x1 [0159.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc8dc) returned 1 [0159.069] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe45bb30, ftCreationTime.dwHighDateTime=0x1d75a0b, ftLastAccessTime.dwLowDateTime=0x959d13f0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x959d13f0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.070] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876ca1b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876ca1b0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876ca1b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x4bc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fK9AO96eyAc5.flv.Poteston", cAlternateFileName="FK9AO9~1.POT")) returned 1 [0159.070] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876f0310, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876f0310, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876f0310, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8ca0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hioo8c.mkv.Poteston", cAlternateFileName="HIOO8C~1.POT")) returned 1 [0159.070] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87716470, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x959d13f0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x959d13f0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0159.070] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8773c5d0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8773c5d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x959ab290, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0159.070] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876f0310, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876f0310, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876f0310, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x10450, dwReserved0=0x0, dwReserved1=0x0, cFileName="WhtX.mkv.Poteston", cAlternateFileName="WHTXMK~1.POT")) returned 1 [0159.070] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876f0310, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876f0310, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876f0310, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x10450, dwReserved0=0x0, dwReserved1=0x0, cFileName="WhtX.mkv.Poteston", cAlternateFileName="WHTXMK~1.POT")) returned 0 [0159.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc64c) returned 1 [0159.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc8ac) returned 1 [0159.070] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc8dc) returned 1 [0159.071] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe45bb30, ftCreationTime.dwHighDateTime=0x1d75a0b, ftLastAccessTime.dwLowDateTime=0x959d13f0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x959d13f0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.071] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876ca1b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876ca1b0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876ca1b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x4bc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fK9AO96eyAc5.flv.Poteston", cAlternateFileName="FK9AO9~1.POT")) returned 1 [0159.071] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876f0310, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876f0310, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876f0310, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8ca0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hioo8c.mkv.Poteston", cAlternateFileName="HIOO8C~1.POT")) returned 1 [0159.071] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87716470, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x959d13f0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x959d13f0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0159.071] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8773c5d0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8773c5d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x959ab290, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0159.071] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876f0310, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876f0310, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876f0310, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x10450, dwReserved0=0x0, dwReserved1=0x0, cFileName="WhtX.mkv.Poteston", cAlternateFileName="WHTXMK~1.POT")) returned 1 [0159.071] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0159.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc64c) returned 1 [0159.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc8ac) returned 1 [0159.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0159.072] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0159.072] GetFileType (hFile=0x178) returned 0x1 [0159.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc1e4) returned 1 [0159.072] GetFileType (hFile=0x178) returned 0x1 [0159.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0159.072] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt.Poteston" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1e8 [0159.073] GetFileType (hFile=0x1e8) returned 0x1 [0159.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc1e4) returned 1 [0159.073] GetFileType (hFile=0x1e8) returned 0x1 [0159.073] SetEndOfFile (hFile=0x1e8) returned 1 [0159.074] ReadFile (in: hFile=0x178, lpBuffer=0x28aa72c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fc270, lpOverlapped=0x0 | out: lpBuffer=0x28aa72c*, lpNumberOfBytesRead=0x2fc270*=0x33e, lpOverlapped=0x0) returned 1 [0159.075] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 1 [0159.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0159.098] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0159.100] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0159.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0159.101] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0159.102] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0159.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0159.103] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0159.104] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0159.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0159.104] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0159.106] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0159.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fcb9c) returned 1 [0159.106] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x178 [0159.107] GetFileType (hFile=0x178) returned 0x1 [0159.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fcb98) returned 1 [0159.107] GetFileType (hFile=0x178) returned 0x1 [0159.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc8dc) returned 1 [0159.109] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347857c0, ftCreationTime.dwHighDateTime=0x1d75bb1, ftLastAccessTime.dwLowDateTime=0x959f7550, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x959f7550, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.109] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87631c30, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87631c30, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x87657d90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xc1c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D091oF_.swf.Poteston", cAlternateFileName="D091OF~1.POT")) returned 1 [0159.109] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87657d90, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87657d90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x87657d90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xab80, dwReserved0=0x0, dwReserved1=0x0, cFileName="hd1DiUlGE54s6YEpZ.mkv.Poteston", cAlternateFileName="HD1DIU~1.POT")) returned 1 [0159.110] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87657d90, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87657d90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x8767def0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xf050, dwReserved0=0x0, dwReserved1=0x0, cFileName="QFFDU_FwV.avi.Poteston", cAlternateFileName="QFFDU_~1.POT")) returned 1 [0159.110] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8767def0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8767def0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x8767def0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8c80, dwReserved0=0x0, dwReserved1=0x0, cFileName="QZgBMdzaEM6oXeH90ZZ.swf.Poteston", cAlternateFileName="QZGBMD~1.POT")) returned 1 [0159.110] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876a4050, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x959f7550, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x959f7550, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0159.110] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87716470, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87716470, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x959d13f0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0159.110] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8767def0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8767def0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876a4050, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x189c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="y3LlbNlOVLYa.flv.Poteston", cAlternateFileName="Y3LLBN~1.POT")) returned 1 [0159.110] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8767def0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8767def0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876a4050, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x189c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="y3LlbNlOVLYa.flv.Poteston", cAlternateFileName="Y3LLBN~1.POT")) returned 0 [0159.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc64c) returned 1 [0159.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc8ac) returned 1 [0159.110] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc8dc) returned 1 [0159.110] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347857c0, ftCreationTime.dwHighDateTime=0x1d75bb1, ftLastAccessTime.dwLowDateTime=0x959f7550, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x959f7550, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.111] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87631c30, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87631c30, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x87657d90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xc1c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D091oF_.swf.Poteston", cAlternateFileName="D091OF~1.POT")) returned 1 [0159.111] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87657d90, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87657d90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x87657d90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xab80, dwReserved0=0x0, dwReserved1=0x0, cFileName="hd1DiUlGE54s6YEpZ.mkv.Poteston", cAlternateFileName="HD1DIU~1.POT")) returned 1 [0159.111] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87657d90, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87657d90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x8767def0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xf050, dwReserved0=0x0, dwReserved1=0x0, cFileName="QFFDU_FwV.avi.Poteston", cAlternateFileName="QFFDU_~1.POT")) returned 1 [0159.111] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8767def0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8767def0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x8767def0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8c80, dwReserved0=0x0, dwReserved1=0x0, cFileName="QZgBMdzaEM6oXeH90ZZ.swf.Poteston", cAlternateFileName="QZGBMD~1.POT")) returned 1 [0159.111] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876a4050, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x959f7550, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x959f7550, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0159.111] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87716470, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87716470, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x959d13f0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0159.111] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8767def0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8767def0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876a4050, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x189c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="y3LlbNlOVLYa.flv.Poteston", cAlternateFileName="Y3LLBN~1.POT")) returned 1 [0159.111] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0159.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc64c) returned 1 [0159.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc8ac) returned 1 [0159.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0159.112] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0159.113] GetFileType (hFile=0x178) returned 0x1 [0159.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc1e4) returned 1 [0159.113] GetFileType (hFile=0x178) returned 0x1 [0159.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0159.113] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt.Poteston" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1e8 [0159.113] GetFileType (hFile=0x1e8) returned 0x1 [0159.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc1e4) returned 1 [0159.113] GetFileType (hFile=0x1e8) returned 0x1 [0159.113] SetEndOfFile (hFile=0x1e8) returned 1 [0159.115] ReadFile (in: hFile=0x178, lpBuffer=0x28c438c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fc270, lpOverlapped=0x0 | out: lpBuffer=0x28c438c*, lpNumberOfBytesRead=0x2fc270*=0x33e, lpOverlapped=0x0) returned 1 [0159.116] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 1 [0159.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0159.121] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.122] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.123] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.125] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.125] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.126] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.127] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.128] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.128] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.129] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.130] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.131] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.132] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x178 [0159.132] GetFileType (hFile=0x178) returned 0x1 [0159.132] GetFileType (hFile=0x178) returned 0x1 [0159.134] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdca4ffc0, ftCreationTime.dwHighDateTime=0x1d751cf, ftLastAccessTime.dwLowDateTime=0x95a1d6b0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x95a1d6b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.134] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876a4050, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876a4050, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876ca1b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xaaf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JH7gB.avi.Poteston", cAlternateFileName="JH7GBA~1.POT")) returned 1 [0159.134] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876ca1b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x95a1d6b0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x95a1d6b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0159.134] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8773c5d0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8773c5d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x959f7550, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0159.134] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8773c5d0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8773c5d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x959f7550, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 0 [0159.134] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdca4ffc0, ftCreationTime.dwHighDateTime=0x1d751cf, ftLastAccessTime.dwLowDateTime=0x95a1d6b0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x95a1d6b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.135] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876a4050, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876a4050, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876ca1b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xaaf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JH7gB.avi.Poteston", cAlternateFileName="JH7GBA~1.POT")) returned 1 [0159.135] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876ca1b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x95a1d6b0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x95a1d6b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0159.135] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8773c5d0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8773c5d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x959f7550, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0159.135] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0159.135] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0159.135] GetFileType (hFile=0x178) returned 0x1 [0159.136] GetFileType (hFile=0x178) returned 0x1 [0159.136] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt.Poteston" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1e8 [0159.136] GetFileType (hFile=0x1e8) returned 0x1 [0159.136] GetFileType (hFile=0x1e8) returned 0x1 [0159.136] SetEndOfFile (hFile=0x1e8) returned 1 [0159.137] ReadFile (in: hFile=0x178, lpBuffer=0x28d83fc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fc270, lpOverlapped=0x0 | out: lpBuffer=0x28d83fc*, lpNumberOfBytesRead=0x2fc270*=0x33e, lpOverlapped=0x0) returned 1 [0159.138] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 1 [0159.140] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.141] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 0 [0159.142] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.143] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 0 [0159.143] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x178 [0159.144] GetFileType (hFile=0x178) returned 0x1 [0159.144] GetFileType (hFile=0x178) returned 0x1 [0159.145] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe45bb30, ftCreationTime.dwHighDateTime=0x1d75a0b, ftLastAccessTime.dwLowDateTime=0x95a69970, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x95a69970, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.146] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876ca1b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876ca1b0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876ca1b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x4bc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fK9AO96eyAc5.flv.Poteston", cAlternateFileName="FK9AO9~1.POT")) returned 1 [0159.146] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876f0310, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876f0310, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876f0310, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8ca0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hioo8c.mkv.Poteston", cAlternateFileName="HIOO8C~1.POT")) returned 1 [0159.146] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87716470, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x95a69970, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x95a8fad0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0159.146] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8773c5d0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8773c5d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x95a1d6b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0159.146] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876f0310, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876f0310, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876f0310, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x10450, dwReserved0=0x0, dwReserved1=0x0, cFileName="WhtX.mkv.Poteston", cAlternateFileName="WHTXMK~1.POT")) returned 1 [0159.146] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876f0310, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876f0310, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876f0310, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x10450, dwReserved0=0x0, dwReserved1=0x0, cFileName="WhtX.mkv.Poteston", cAlternateFileName="WHTXMK~1.POT")) returned 0 [0159.146] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe45bb30, ftCreationTime.dwHighDateTime=0x1d75a0b, ftLastAccessTime.dwLowDateTime=0x95a69970, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x95a69970, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.146] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876ca1b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876ca1b0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876ca1b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x4bc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fK9AO96eyAc5.flv.Poteston", cAlternateFileName="FK9AO9~1.POT")) returned 1 [0159.146] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876f0310, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876f0310, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876f0310, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8ca0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hioo8c.mkv.Poteston", cAlternateFileName="HIOO8C~1.POT")) returned 1 [0159.147] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87716470, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x95a69970, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x95a8fad0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0159.147] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8773c5d0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8773c5d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x95a1d6b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0159.147] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876f0310, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876f0310, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876f0310, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x10450, dwReserved0=0x0, dwReserved1=0x0, cFileName="WhtX.mkv.Poteston", cAlternateFileName="WHTXMK~1.POT")) returned 1 [0159.147] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0159.147] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0159.148] GetFileType (hFile=0x178) returned 0x1 [0159.148] GetFileType (hFile=0x178) returned 0x1 [0159.148] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt.Poteston" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1e8 [0159.148] GetFileType (hFile=0x1e8) returned 0x1 [0159.148] GetFileType (hFile=0x1e8) returned 0x1 [0159.148] SetEndOfFile (hFile=0x1e8) returned 1 [0159.149] ReadFile (in: hFile=0x178, lpBuffer=0x28e7c10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fc270, lpOverlapped=0x0 | out: lpBuffer=0x28e7c10*, lpNumberOfBytesRead=0x2fc270*=0x33e, lpOverlapped=0x0) returned 1 [0159.151] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 1 [0159.152] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.153] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0159.154] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.155] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0159.155] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.157] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0159.157] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.158] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0159.159] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x178 [0159.159] GetFileType (hFile=0x178) returned 0x1 [0159.160] GetFileType (hFile=0x178) returned 0x1 [0159.161] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0159.161] GetFileType (hFile=0x178) returned 0x1 [0159.161] GetFileType (hFile=0x178) returned 0x1 [0159.161] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\readme.txt.Poteston" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\readme.txt.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1e8 [0159.162] GetFileType (hFile=0x1e8) returned 0x1 [0159.162] GetFileType (hFile=0x1e8) returned 0x1 [0159.162] SetEndOfFile (hFile=0x1e8) returned 1 [0159.163] ReadFile (in: hFile=0x178, lpBuffer=0x28f5da4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fc7ac, lpOverlapped=0x0 | out: lpBuffer=0x28f5da4*, lpNumberOfBytesRead=0x2fc7ac*=0x33e, lpOverlapped=0x0) returned 1 [0159.164] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\readme.txt")) returned 1 [0159.166] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.167] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\readme.txt")) returned 0 [0159.168] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.169] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\readme.txt")) returned 0 [0159.169] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.170] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\readme.txt")) returned 0 [0159.171] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.172] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\readme.txt")) returned 0 [0159.172] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.174] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\readme.txt")) returned 0 [0159.174] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.176] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\readme.txt")) returned 0 [0159.176] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347857c0, ftCreationTime.dwHighDateTime=0x1d75bb1, ftLastAccessTime.dwLowDateTime=0x95ab5c30, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x95ab5c30, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.176] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87631c30, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87631c30, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x87657d90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xc1c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D091oF_.swf.Poteston", cAlternateFileName="D091OF~1.POT")) returned 1 [0159.176] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87657d90, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87657d90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x87657d90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xab80, dwReserved0=0x0, dwReserved1=0x0, cFileName="hd1DiUlGE54s6YEpZ.mkv.Poteston", cAlternateFileName="HD1DIU~1.POT")) returned 1 [0159.176] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87657d90, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87657d90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x8767def0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xf050, dwReserved0=0x0, dwReserved1=0x0, cFileName="QFFDU_FwV.avi.Poteston", cAlternateFileName="QFFDU_~1.POT")) returned 1 [0159.176] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8767def0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8767def0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x8767def0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8c80, dwReserved0=0x0, dwReserved1=0x0, cFileName="QZgBMdzaEM6oXeH90ZZ.swf.Poteston", cAlternateFileName="QZGBMD~1.POT")) returned 1 [0159.177] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876a4050, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x95ab5c30, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x95ab5c30, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0159.177] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87716470, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87716470, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x95a8fad0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0159.177] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8767def0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8767def0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876a4050, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x189c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="y3LlbNlOVLYa.flv.Poteston", cAlternateFileName="Y3LLBN~1.POT")) returned 1 [0159.177] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8767def0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8767def0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876a4050, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x189c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="y3LlbNlOVLYa.flv.Poteston", cAlternateFileName="Y3LLBN~1.POT")) returned 0 [0159.177] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347857c0, ftCreationTime.dwHighDateTime=0x1d75bb1, ftLastAccessTime.dwLowDateTime=0x95ab5c30, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x95ab5c30, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.177] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87631c30, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87631c30, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x87657d90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xc1c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D091oF_.swf.Poteston", cAlternateFileName="D091OF~1.POT")) returned 1 [0159.177] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87657d90, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87657d90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x87657d90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xab80, dwReserved0=0x0, dwReserved1=0x0, cFileName="hd1DiUlGE54s6YEpZ.mkv.Poteston", cAlternateFileName="HD1DIU~1.POT")) returned 1 [0159.177] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87657d90, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87657d90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x8767def0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xf050, dwReserved0=0x0, dwReserved1=0x0, cFileName="QFFDU_FwV.avi.Poteston", cAlternateFileName="QFFDU_~1.POT")) returned 1 [0159.177] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8767def0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8767def0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x8767def0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8c80, dwReserved0=0x0, dwReserved1=0x0, cFileName="QZgBMdzaEM6oXeH90ZZ.swf.Poteston", cAlternateFileName="QZGBMD~1.POT")) returned 1 [0159.178] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876a4050, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x95ab5c30, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x95ab5c30, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0159.178] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87716470, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87716470, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x95a8fad0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0159.178] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8767def0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8767def0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876a4050, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x189c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="y3LlbNlOVLYa.flv.Poteston", cAlternateFileName="Y3LLBN~1.POT")) returned 1 [0159.178] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0159.179] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0159.179] GetFileType (hFile=0x178) returned 0x1 [0159.179] GetFileType (hFile=0x178) returned 0x1 [0159.179] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt.Poteston" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1e8 [0159.180] GetFileType (hFile=0x1e8) returned 0x1 [0159.180] GetFileType (hFile=0x1e8) returned 0x1 [0159.180] SetEndOfFile (hFile=0x1e8) returned 1 [0159.181] ReadFile (in: hFile=0x178, lpBuffer=0x29087f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fc270, lpOverlapped=0x0 | out: lpBuffer=0x29087f8*, lpNumberOfBytesRead=0x2fc270*=0x33e, lpOverlapped=0x0) returned 1 [0159.183] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 1 [0159.184] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.186] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.186] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.187] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.188] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.189] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.189] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.190] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.191] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.192] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.192] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.193] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.194] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x178 [0159.195] GetFileType (hFile=0x178) returned 0x1 [0159.195] GetFileType (hFile=0x178) returned 0x1 [0159.196] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdca4ffc0, ftCreationTime.dwHighDateTime=0x1d751cf, ftLastAccessTime.dwLowDateTime=0x95adbd90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x95adbd90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.196] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876a4050, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876a4050, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876ca1b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xaaf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JH7gB.avi.Poteston", cAlternateFileName="JH7GBA~1.POT")) returned 1 [0159.197] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876ca1b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x95adbd90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x95adbd90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0159.197] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8773c5d0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8773c5d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x95ab5c30, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0159.197] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8773c5d0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8773c5d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x95ab5c30, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 0 [0159.197] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdca4ffc0, ftCreationTime.dwHighDateTime=0x1d751cf, ftLastAccessTime.dwLowDateTime=0x95adbd90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x95adbd90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.197] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876a4050, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876a4050, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876ca1b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xaaf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JH7gB.avi.Poteston", cAlternateFileName="JH7GBA~1.POT")) returned 1 [0159.197] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876ca1b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x95adbd90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x95adbd90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0159.197] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8773c5d0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8773c5d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x95ab5c30, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0159.197] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0159.198] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0159.198] GetFileType (hFile=0x178) returned 0x1 [0159.198] GetFileType (hFile=0x178) returned 0x1 [0159.198] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt.Poteston" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1e8 [0159.198] GetFileType (hFile=0x1e8) returned 0x1 [0159.198] GetFileType (hFile=0x1e8) returned 0x1 [0159.198] SetEndOfFile (hFile=0x1e8) returned 1 [0159.200] ReadFile (in: hFile=0x178, lpBuffer=0x291c868, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fc270, lpOverlapped=0x0 | out: lpBuffer=0x291c868*, lpNumberOfBytesRead=0x2fc270*=0x33e, lpOverlapped=0x0) returned 1 [0159.201] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 1 [0159.202] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.204] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 0 [0159.204] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.205] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 0 [0159.206] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x178 [0159.206] GetFileType (hFile=0x178) returned 0x1 [0159.206] GetFileType (hFile=0x178) returned 0x1 [0159.208] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe45bb30, ftCreationTime.dwHighDateTime=0x1d75a0b, ftLastAccessTime.dwLowDateTime=0x95b01ef0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x95b01ef0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.208] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876ca1b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876ca1b0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876ca1b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x4bc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fK9AO96eyAc5.flv.Poteston", cAlternateFileName="FK9AO9~1.POT")) returned 1 [0159.208] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876f0310, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876f0310, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876f0310, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8ca0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hioo8c.mkv.Poteston", cAlternateFileName="HIOO8C~1.POT")) returned 1 [0159.208] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87716470, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x95b01ef0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x95b01ef0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0159.208] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8773c5d0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8773c5d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x95adbd90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0159.209] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0159.209] GetFileType (hFile=0x178) returned 0x1 [0159.209] GetFileType (hFile=0x178) returned 0x1 [0159.210] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt.Poteston" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1e8 [0159.210] GetFileType (hFile=0x1e8) returned 0x1 [0159.210] GetFileType (hFile=0x1e8) returned 0x1 [0159.210] SetEndOfFile (hFile=0x1e8) returned 1 [0159.211] ReadFile (in: hFile=0x178, lpBuffer=0x292c07c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fc270, lpOverlapped=0x0 | out: lpBuffer=0x292c07c*, lpNumberOfBytesRead=0x2fc270*=0x33e, lpOverlapped=0x0) returned 1 [0159.212] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 1 [0159.214] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.215] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0159.215] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.216] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0159.216] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.217] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0159.217] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.219] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0159.220] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x178 [0159.220] GetFileType (hFile=0x178) returned 0x1 [0159.220] GetFileType (hFile=0x178) returned 0x1 [0159.223] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0159.223] GetFileType (hFile=0x178) returned 0x1 [0159.223] GetFileType (hFile=0x178) returned 0x1 [0159.224] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt.Poteston" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1e8 [0159.224] GetFileType (hFile=0x1e8) returned 0x1 [0159.224] GetFileType (hFile=0x1e8) returned 0x1 [0159.224] SetEndOfFile (hFile=0x1e8) returned 1 [0159.225] ReadFile (in: hFile=0x178, lpBuffer=0x2945cdc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fc270, lpOverlapped=0x0 | out: lpBuffer=0x2945cdc*, lpNumberOfBytesRead=0x2fc270*=0x33e, lpOverlapped=0x0) returned 1 [0159.226] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 1 [0159.228] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.229] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.229] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.230] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.230] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.231] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.231] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.232] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.232] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.233] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.233] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.233] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.234] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x178 [0159.234] GetFileType (hFile=0x178) returned 0x1 [0159.234] GetFileType (hFile=0x178) returned 0x1 [0159.236] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0159.236] GetFileType (hFile=0x178) returned 0x1 [0159.237] GetFileType (hFile=0x178) returned 0x1 [0159.237] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt.Poteston" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1e8 [0159.237] GetFileType (hFile=0x1e8) returned 0x1 [0159.237] GetFileType (hFile=0x1e8) returned 0x1 [0159.237] SetEndOfFile (hFile=0x1e8) returned 1 [0159.238] ReadFile (in: hFile=0x178, lpBuffer=0x2959d4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fc270, lpOverlapped=0x0 | out: lpBuffer=0x2959d4c*, lpNumberOfBytesRead=0x2fc270*=0x33e, lpOverlapped=0x0) returned 1 [0159.239] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 1 [0159.241] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.241] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 0 [0159.242] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.242] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 0 [0159.242] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x178 [0159.243] GetFileType (hFile=0x178) returned 0x1 [0159.243] GetFileType (hFile=0x178) returned 0x1 [0159.245] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0159.245] GetFileType (hFile=0x178) returned 0x1 [0159.245] GetFileType (hFile=0x178) returned 0x1 [0159.245] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt.Poteston" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1e8 [0159.245] GetFileType (hFile=0x1e8) returned 0x1 [0159.246] GetFileType (hFile=0x1e8) returned 0x1 [0159.246] SetEndOfFile (hFile=0x1e8) returned 1 [0159.247] ReadFile (in: hFile=0x178, lpBuffer=0x2969554, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fc270, lpOverlapped=0x0 | out: lpBuffer=0x2969554*, lpNumberOfBytesRead=0x2fc270*=0x33e, lpOverlapped=0x0) returned 1 [0159.248] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 1 [0159.250] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.250] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0159.250] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.251] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0159.252] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.252] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0159.253] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.253] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0159.253] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x178 [0159.254] GetFileType (hFile=0x178) returned 0x1 [0159.254] GetFileType (hFile=0x178) returned 0x1 [0159.257] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0159.257] GetFileType (hFile=0x178) returned 0x1 [0159.257] GetFileType (hFile=0x178) returned 0x1 [0159.257] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt.Poteston" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1e8 [0159.257] GetFileType (hFile=0x1e8) returned 0x1 [0159.257] GetFileType (hFile=0x1e8) returned 0x1 [0159.257] SetEndOfFile (hFile=0x1e8) returned 1 [0159.259] ReadFile (in: hFile=0x178, lpBuffer=0x29831b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fc270, lpOverlapped=0x0 | out: lpBuffer=0x29831b4*, lpNumberOfBytesRead=0x2fc270*=0x33e, lpOverlapped=0x0) returned 1 [0159.260] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 1 [0159.261] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.262] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.262] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.262] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.263] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.263] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.263] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.263] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.264] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.264] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.264] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.265] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.265] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x178 [0159.266] GetFileType (hFile=0x178) returned 0x1 [0159.266] GetFileType (hFile=0x178) returned 0x1 [0159.268] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0159.268] GetFileType (hFile=0x178) returned 0x1 [0159.268] GetFileType (hFile=0x178) returned 0x1 [0159.268] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt.Poteston" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1e8 [0159.268] GetFileType (hFile=0x1e8) returned 0x1 [0159.268] GetFileType (hFile=0x1e8) returned 0x1 [0159.268] SetEndOfFile (hFile=0x1e8) returned 1 [0159.273] ReadFile (in: hFile=0x178, lpBuffer=0x2997224, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fc270, lpOverlapped=0x0 | out: lpBuffer=0x2997224*, lpNumberOfBytesRead=0x2fc270*=0x33e, lpOverlapped=0x0) returned 1 [0159.274] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 1 [0159.276] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.276] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 0 [0159.276] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.277] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 0 [0159.277] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x178 [0159.278] GetFileType (hFile=0x178) returned 0x1 [0159.278] GetFileType (hFile=0x178) returned 0x1 [0159.280] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0159.280] GetFileType (hFile=0x178) returned 0x1 [0159.280] GetFileType (hFile=0x178) returned 0x1 [0159.280] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt.Poteston" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1e8 [0159.280] GetFileType (hFile=0x1e8) returned 0x1 [0159.280] GetFileType (hFile=0x1e8) returned 0x1 [0159.281] SetEndOfFile (hFile=0x1e8) returned 1 [0159.282] ReadFile (in: hFile=0x178, lpBuffer=0x29a6a38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fc270, lpOverlapped=0x0 | out: lpBuffer=0x29a6a38*, lpNumberOfBytesRead=0x2fc270*=0x33e, lpOverlapped=0x0) returned 1 [0159.283] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 1 [0159.285] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.285] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0159.285] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.286] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0159.286] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.286] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0159.286] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.287] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0159.287] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x178 [0159.288] GetFileType (hFile=0x178) returned 0x1 [0159.288] GetFileType (hFile=0x178) returned 0x1 [0159.289] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x178 [0159.290] GetFileType (hFile=0x178) returned 0x1 [0159.290] GetFileType (hFile=0x178) returned 0x1 [0159.297] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0159.297] GetFileType (hFile=0x178) returned 0x1 [0159.297] GetFileType (hFile=0x178) returned 0x1 [0159.297] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt.Poteston" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1e8 [0159.297] GetFileType (hFile=0x1e8) returned 0x1 [0159.297] GetFileType (hFile=0x1e8) returned 0x1 [0159.298] SetEndOfFile (hFile=0x1e8) returned 1 [0159.299] ReadFile (in: hFile=0x178, lpBuffer=0x27ccaac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fc270, lpOverlapped=0x0 | out: lpBuffer=0x27ccaac*, lpNumberOfBytesRead=0x2fc270*=0x33e, lpOverlapped=0x0) returned 1 [0159.300] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 1 [0159.302] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.302] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.302] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.303] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.303] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.303] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.303] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.304] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.304] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.304] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.305] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.305] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.305] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x178 [0159.306] GetFileType (hFile=0x178) returned 0x1 [0159.306] GetFileType (hFile=0x178) returned 0x1 [0159.308] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0159.308] GetFileType (hFile=0x178) returned 0x1 [0159.308] GetFileType (hFile=0x178) returned 0x1 [0159.308] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt.Poteston" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1e8 [0159.308] GetFileType (hFile=0x1e8) returned 0x1 [0159.309] GetFileType (hFile=0x1e8) returned 0x1 [0159.309] SetEndOfFile (hFile=0x1e8) returned 1 [0159.310] ReadFile (in: hFile=0x178, lpBuffer=0x27e0b1c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fc270, lpOverlapped=0x0 | out: lpBuffer=0x27e0b1c*, lpNumberOfBytesRead=0x2fc270*=0x33e, lpOverlapped=0x0) returned 1 [0159.311] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 1 [0159.313] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.313] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 0 [0159.313] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.314] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 0 [0159.314] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x178 [0159.314] GetFileType (hFile=0x178) returned 0x1 [0159.314] GetFileType (hFile=0x178) returned 0x1 [0159.316] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0159.317] GetFileType (hFile=0x178) returned 0x1 [0159.317] GetFileType (hFile=0x178) returned 0x1 [0159.317] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt.Poteston" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1e8 [0159.317] GetFileType (hFile=0x1e8) returned 0x1 [0159.317] GetFileType (hFile=0x1e8) returned 0x1 [0159.317] SetEndOfFile (hFile=0x1e8) returned 1 [0159.318] ReadFile (in: hFile=0x178, lpBuffer=0x27f0330, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fc270, lpOverlapped=0x0 | out: lpBuffer=0x27f0330*, lpNumberOfBytesRead=0x2fc270*=0x33e, lpOverlapped=0x0) returned 1 [0159.320] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 1 [0159.321] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.322] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0159.322] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.322] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0159.322] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.323] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0159.323] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.323] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0159.324] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x178 [0159.324] GetFileType (hFile=0x178) returned 0x1 [0159.324] GetFileType (hFile=0x178) returned 0x1 [0159.327] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0159.327] GetFileType (hFile=0x178) returned 0x1 [0159.327] GetFileType (hFile=0x178) returned 0x1 [0159.328] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt.Poteston" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1e8 [0159.328] GetFileType (hFile=0x1e8) returned 0x1 [0159.328] GetFileType (hFile=0x1e8) returned 0x1 [0159.328] SetEndOfFile (hFile=0x1e8) returned 1 [0159.329] ReadFile (in: hFile=0x178, lpBuffer=0x2809f90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fc270, lpOverlapped=0x0 | out: lpBuffer=0x2809f90*, lpNumberOfBytesRead=0x2fc270*=0x33e, lpOverlapped=0x0) returned 1 [0159.330] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 1 [0159.332] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.332] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.333] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.333] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.333] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.333] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.334] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.334] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.334] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.334] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.335] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.335] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.336] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x178 [0159.336] GetFileType (hFile=0x178) returned 0x1 [0159.336] GetFileType (hFile=0x178) returned 0x1 [0159.338] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0159.338] GetFileType (hFile=0x178) returned 0x1 [0159.338] GetFileType (hFile=0x178) returned 0x1 [0159.338] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt.Poteston" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1e8 [0159.339] GetFileType (hFile=0x1e8) returned 0x1 [0159.339] GetFileType (hFile=0x1e8) returned 0x1 [0159.339] SetEndOfFile (hFile=0x1e8) returned 1 [0159.340] ReadFile (in: hFile=0x178, lpBuffer=0x281e000, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fc270, lpOverlapped=0x0 | out: lpBuffer=0x281e000*, lpNumberOfBytesRead=0x2fc270*=0x33e, lpOverlapped=0x0) returned 1 [0159.341] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 1 [0159.348] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.348] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 0 [0159.348] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.349] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 0 [0159.349] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x178 [0159.349] GetFileType (hFile=0x178) returned 0x1 [0159.350] GetFileType (hFile=0x178) returned 0x1 [0159.352] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0159.352] GetFileType (hFile=0x178) returned 0x1 [0159.352] GetFileType (hFile=0x178) returned 0x1 [0159.352] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt.Poteston" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1e8 [0159.352] GetFileType (hFile=0x1e8) returned 0x1 [0159.352] GetFileType (hFile=0x1e8) returned 0x1 [0159.352] SetEndOfFile (hFile=0x1e8) returned 1 [0159.354] ReadFile (in: hFile=0x178, lpBuffer=0x282d814, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fc270, lpOverlapped=0x0 | out: lpBuffer=0x282d814*, lpNumberOfBytesRead=0x2fc270*=0x33e, lpOverlapped=0x0) returned 1 [0159.355] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 1 [0159.357] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.357] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0159.357] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.358] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0159.358] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.358] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0159.359] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.359] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0159.359] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x178 [0159.360] GetFileType (hFile=0x178) returned 0x1 [0159.360] GetFileType (hFile=0x178) returned 0x1 [0159.363] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0159.363] GetFileType (hFile=0x178) returned 0x1 [0159.363] GetFileType (hFile=0x178) returned 0x1 [0159.363] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt.Poteston" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1e8 [0159.363] GetFileType (hFile=0x1e8) returned 0x1 [0159.363] GetFileType (hFile=0x1e8) returned 0x1 [0159.364] SetEndOfFile (hFile=0x1e8) returned 1 [0159.365] ReadFile (in: hFile=0x178, lpBuffer=0x2847474, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fc270, lpOverlapped=0x0 | out: lpBuffer=0x2847474*, lpNumberOfBytesRead=0x2fc270*=0x33e, lpOverlapped=0x0) returned 1 [0159.366] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 1 [0159.368] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.368] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.368] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.368] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.369] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.369] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.369] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.370] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.370] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.370] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.370] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.371] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.371] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x178 [0159.372] GetFileType (hFile=0x178) returned 0x1 [0159.372] GetFileType (hFile=0x178) returned 0x1 [0159.374] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0159.374] GetFileType (hFile=0x178) returned 0x1 [0159.374] GetFileType (hFile=0x178) returned 0x1 [0159.374] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt.Poteston" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1e8 [0159.375] GetFileType (hFile=0x1e8) returned 0x1 [0159.375] GetFileType (hFile=0x1e8) returned 0x1 [0159.375] SetEndOfFile (hFile=0x1e8) returned 1 [0159.376] ReadFile (in: hFile=0x178, lpBuffer=0x285b4e4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fc270, lpOverlapped=0x0 | out: lpBuffer=0x285b4e4*, lpNumberOfBytesRead=0x2fc270*=0x33e, lpOverlapped=0x0) returned 1 [0159.377] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 1 [0159.379] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.379] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 0 [0159.379] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.380] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 0 [0159.380] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x178 [0159.381] GetFileType (hFile=0x178) returned 0x1 [0159.381] GetFileType (hFile=0x178) returned 0x1 [0159.383] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0159.383] GetFileType (hFile=0x178) returned 0x1 [0159.383] GetFileType (hFile=0x178) returned 0x1 [0159.383] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt.Poteston" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1e8 [0159.383] GetFileType (hFile=0x1e8) returned 0x1 [0159.384] GetFileType (hFile=0x1e8) returned 0x1 [0159.384] SetEndOfFile (hFile=0x1e8) returned 1 [0159.385] ReadFile (in: hFile=0x178, lpBuffer=0x286acec, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fc270, lpOverlapped=0x0 | out: lpBuffer=0x286acec*, lpNumberOfBytesRead=0x2fc270*=0x33e, lpOverlapped=0x0) returned 1 [0159.386] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 1 [0159.388] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.388] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0159.388] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.389] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0159.389] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.390] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0159.390] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.390] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0159.391] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x178 [0159.391] GetFileType (hFile=0x178) returned 0x1 [0159.391] GetFileType (hFile=0x178) returned 0x1 [0159.396] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0159.397] GetFileType (hFile=0x178) returned 0x1 [0159.397] GetFileType (hFile=0x178) returned 0x1 [0159.397] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt.Poteston" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1e8 [0159.397] GetFileType (hFile=0x1e8) returned 0x1 [0159.397] GetFileType (hFile=0x1e8) returned 0x1 [0159.397] SetEndOfFile (hFile=0x1e8) returned 1 [0159.398] ReadFile (in: hFile=0x178, lpBuffer=0x288494c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fc270, lpOverlapped=0x0 | out: lpBuffer=0x288494c*, lpNumberOfBytesRead=0x2fc270*=0x33e, lpOverlapped=0x0) returned 1 [0159.400] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 1 [0159.401] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.402] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.402] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.402] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.403] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.403] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.403] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.403] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.404] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.404] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.404] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.415] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.417] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x178 [0159.417] GetFileType (hFile=0x178) returned 0x1 [0159.417] GetFileType (hFile=0x178) returned 0x1 [0159.419] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0159.419] GetFileType (hFile=0x178) returned 0x1 [0159.419] GetFileType (hFile=0x178) returned 0x1 [0159.420] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt.Poteston" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1e8 [0159.420] GetFileType (hFile=0x1e8) returned 0x1 [0159.420] GetFileType (hFile=0x1e8) returned 0x1 [0159.420] SetEndOfFile (hFile=0x1e8) returned 1 [0159.421] ReadFile (in: hFile=0x178, lpBuffer=0x28989bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2fc270, lpOverlapped=0x0 | out: lpBuffer=0x28989bc*, lpNumberOfBytesRead=0x2fc270*=0x33e, lpOverlapped=0x0) returned 1 [0159.422] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 1 [0159.424] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0159.424] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 0 [0159.425] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 0 [0159.428] SetEndOfFile (hFile=0x1e8) returned 1 [0159.431] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 1 [0159.432] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0159.433] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0159.433] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0159.434] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0159.436] SetEndOfFile (hFile=0x1e8) returned 1 [0159.439] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\readme.txt")) returned 1 [0159.440] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\readme.txt")) returned 0 [0159.441] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\readme.txt")) returned 0 [0159.441] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\readme.txt")) returned 0 [0159.442] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\readme.txt")) returned 0 [0159.442] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\readme.txt")) returned 0 [0159.442] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\readme.txt")) returned 0 [0159.444] SetEndOfFile (hFile=0x1e8) returned 1 [0159.446] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 1 [0159.448] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.449] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.449] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.449] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.450] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.450] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.454] SetEndOfFile (hFile=0x1e8) returned 1 [0159.456] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 1 [0159.458] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 0 [0159.459] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 0 [0159.461] SetEndOfFile (hFile=0x1e8) returned 1 [0159.464] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 1 [0159.465] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0159.466] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0159.466] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0159.466] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0159.470] SetEndOfFile (hFile=0x1e8) returned 1 [0159.472] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 1 [0159.474] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.474] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.475] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.475] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.475] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.476] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.478] SetEndOfFile (hFile=0x1e8) returned 1 [0159.481] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 1 [0159.482] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 0 [0159.483] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 0 [0159.486] SetEndOfFile (hFile=0x1e8) returned 1 [0159.488] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 1 [0159.490] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0159.490] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0159.491] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0159.491] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0159.494] SetEndOfFile (hFile=0x1e8) returned 1 [0159.497] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 1 [0159.499] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.499] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.500] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.500] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.500] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.501] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.503] SetEndOfFile (hFile=0x1e8) returned 1 [0159.506] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 1 [0159.507] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 0 [0159.508] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 0 [0159.510] SetEndOfFile (hFile=0x1e8) returned 1 [0159.512] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 1 [0159.514] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0159.515] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0159.515] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0159.516] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0159.522] SetEndOfFile (hFile=0x1e8) returned 1 [0159.528] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\8nDlB4ra8RRygNI\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\8ndlb4ra8rrygni\\readme.txt")) returned 1 [0159.532] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\8nDlB4ra8RRygNI\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\8ndlb4ra8rrygni\\readme.txt")) returned 0 [0159.533] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\8nDlB4ra8RRygNI\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\8ndlb4ra8rrygni\\readme.txt")) returned 0 [0159.533] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\8nDlB4ra8RRygNI\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\8ndlb4ra8rrygni\\readme.txt")) returned 0 [0159.533] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\8nDlB4ra8RRygNI\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\8ndlb4ra8rrygni\\readme.txt")) returned 0 [0159.538] SetEndOfFile (hFile=0x1e8) returned 1 [0159.541] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 1 [0159.542] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.543] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.543] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.544] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.544] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.544] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0159.547] SetEndOfFile (hFile=0x1e8) returned 1 [0159.556] SetEndOfFile (hFile=0x1e8) returned 1 [0159.565] SetEndOfFile (hFile=0x1e8) returned 1 [0159.571] SetEndOfFile (hFile=0x1e8) returned 1 [0159.577] SetEndOfFile (hFile=0x1e8) returned 1 [0159.584] SetEndOfFile (hFile=0x1e8) returned 1 [0159.598] SetEndOfFile (hFile=0x1e8) returned 1 [0159.605] SetEndOfFile (hFile=0x1e8) returned 1 [0159.612] SetEndOfFile (hFile=0x1e8) returned 1 [0159.619] SetEndOfFile (hFile=0x1e8) returned 1 [0159.625] SetEndOfFile (hFile=0x1e8) returned 1 [0159.631] SetEndOfFile (hFile=0x1e8) returned 1 [0159.636] SetEndOfFile (hFile=0x1e8) returned 1 [0159.645] SetEndOfFile (hFile=0x1e8) returned 1 [0159.652] SetEndOfFile (hFile=0x1e8) returned 1 [0159.659] SetEndOfFile (hFile=0x1e8) returned 1 [0159.667] SetEndOfFile (hFile=0x1e8) returned 1 [0159.675] SetEndOfFile (hFile=0x1e8) returned 1 [0159.682] SetEndOfFile (hFile=0x1e8) returned 1 [0159.690] SetEndOfFile (hFile=0x1e8) returned 1 [0159.696] SetEndOfFile (hFile=0x1e8) returned 1 [0159.708] SetEndOfFile (hFile=0x1e8) returned 1 [0159.715] SetEndOfFile (hFile=0x1e8) returned 1 [0159.721] SetEndOfFile (hFile=0x1e8) returned 1 [0159.731] SetEndOfFile (hFile=0x1e8) returned 1 [0159.738] SetEndOfFile (hFile=0x1e8) returned 1 [0159.748] SetEndOfFile (hFile=0x1e8) returned 1 [0159.755] SetEndOfFile (hFile=0x1e8) returned 1 [0159.761] SetEndOfFile (hFile=0x1e8) returned 1 [0159.767] SetEndOfFile (hFile=0x1e8) returned 1 [0159.774] SetEndOfFile (hFile=0x1e8) returned 1 [0159.782] SetEndOfFile (hFile=0x1e8) returned 1 [0159.788] SetEndOfFile (hFile=0x1e8) returned 1 [0159.793] SetEndOfFile (hFile=0x1e8) returned 1 [0159.800] SetEndOfFile (hFile=0x1e8) returned 1 [0159.806] SetEndOfFile (hFile=0x1e8) returned 1 [0159.812] SetEndOfFile (hFile=0x1e8) returned 1 [0159.819] SetEndOfFile (hFile=0x1e8) returned 1 [0159.826] SetEndOfFile (hFile=0x1e8) returned 1 [0159.832] SetEndOfFile (hFile=0x1e8) returned 1 [0159.839] SetEndOfFile (hFile=0x1e8) returned 1 [0159.846] SetEndOfFile (hFile=0x1e8) returned 1 [0159.852] SetEndOfFile (hFile=0x1e8) returned 1 [0159.861] SetEndOfFile (hFile=0x1e8) returned 1 [0159.868] SetEndOfFile (hFile=0x1e8) returned 1 [0159.875] SetEndOfFile (hFile=0x1e8) returned 1 [0159.905] SetEndOfFile (hFile=0x1e8) returned 1 [0159.911] SetEndOfFile (hFile=0x1e8) returned 1 [0159.917] SetEndOfFile (hFile=0x1e8) returned 1 [0159.924] SetEndOfFile (hFile=0x1e8) returned 1 [0159.934] SetEndOfFile (hFile=0x1e8) returned 1 [0159.946] SetEndOfFile (hFile=0x1e8) returned 1 [0159.953] SetEndOfFile (hFile=0x1e8) returned 1 [0159.959] SetEndOfFile (hFile=0x1e8) returned 1 [0159.965] SetEndOfFile (hFile=0x1e8) returned 1 [0159.971] SetEndOfFile (hFile=0x1e8) returned 1 [0159.976] SetEndOfFile (hFile=0x1e8) returned 1 [0159.984] SetEndOfFile (hFile=0x1e8) returned 1 [0159.990] SetEndOfFile (hFile=0x1e8) returned 1 [0159.997] SetEndOfFile (hFile=0x1e8) returned 1 [0160.004] SetEndOfFile (hFile=0x1e8) returned 1 [0160.010] SetEndOfFile (hFile=0x1e8) returned 1 [0160.017] SetEndOfFile (hFile=0x1e8) returned 1 [0160.024] SetEndOfFile (hFile=0x1e8) returned 1 [0160.030] SetEndOfFile (hFile=0x1e8) returned 1 [0160.037] SetEndOfFile (hFile=0x1e8) returned 1 [0160.043] SetEndOfFile (hFile=0x1e8) returned 1 [0160.049] SetEndOfFile (hFile=0x1e8) returned 1 [0160.056] SetEndOfFile (hFile=0x1e8) returned 1 [0160.063] SetEndOfFile (hFile=0x1e8) returned 1 [0160.071] SetEndOfFile (hFile=0x1e8) returned 1 [0160.096] SetEndOfFile (hFile=0x1e8) returned 1 [0160.103] SetEndOfFile (hFile=0x1e8) returned 1 [0160.110] SetEndOfFile (hFile=0x1e8) returned 1 [0160.116] SetEndOfFile (hFile=0x1e8) returned 1 [0160.123] SetEndOfFile (hFile=0x1e8) returned 1 [0160.132] SetEndOfFile (hFile=0x1e8) returned 1 [0160.145] SetEndOfFile (hFile=0x1e8) returned 1 [0160.150] SetEndOfFile (hFile=0x1e8) returned 1 [0160.156] SetEndOfFile (hFile=0x1e8) returned 1 [0160.163] SetEndOfFile (hFile=0x1e8) returned 1 [0160.169] SetEndOfFile (hFile=0x1e8) returned 1 [0160.176] SetEndOfFile (hFile=0x1e8) returned 1 [0160.183] SetEndOfFile (hFile=0x1e8) returned 1 [0160.190] SetEndOfFile (hFile=0x1e8) returned 1 [0160.197] SetEndOfFile (hFile=0x1e8) returned 1 [0160.203] SetEndOfFile (hFile=0x1e8) returned 1 [0160.209] SetEndOfFile (hFile=0x1e8) returned 1 [0160.220] SetEndOfFile (hFile=0x1e8) returned 1 [0160.226] SetEndOfFile (hFile=0x1e8) returned 1 [0160.232] SetEndOfFile (hFile=0x1e8) returned 1 [0160.240] SetEndOfFile (hFile=0x1e8) returned 1 [0160.246] SetEndOfFile (hFile=0x1e8) returned 1 [0160.252] SetEndOfFile (hFile=0x1e8) returned 1 [0160.259] SetEndOfFile (hFile=0x1e8) returned 1 [0160.267] SetEndOfFile (hFile=0x1e8) returned 1 [0160.273] SetEndOfFile (hFile=0x1e8) returned 1 [0160.280] SetEndOfFile (hFile=0x1e8) returned 1 [0160.287] SetEndOfFile (hFile=0x1e8) returned 1 [0160.293] SetEndOfFile (hFile=0x1e8) returned 1 [0160.298] SetEndOfFile (hFile=0x1e8) returned 1 [0160.304] SetEndOfFile (hFile=0x1e8) returned 1 [0160.316] SetEndOfFile (hFile=0x1e8) returned 1 [0160.325] SetEndOfFile (hFile=0x1e8) returned 1 [0160.333] SetEndOfFile (hFile=0x1e8) returned 1 [0160.339] SetEndOfFile (hFile=0x1e8) returned 1 [0160.346] SetEndOfFile (hFile=0x1e8) returned 1 [0160.353] SetEndOfFile (hFile=0x1e8) returned 1 [0160.362] SetEndOfFile (hFile=0x1e8) returned 1 [0160.368] SetEndOfFile (hFile=0x1e8) returned 1 [0160.377] SetEndOfFile (hFile=0x1e8) returned 1 [0160.383] SetEndOfFile (hFile=0x1e8) returned 1 [0160.389] SetEndOfFile (hFile=0x1e8) returned 1 [0160.396] SetEndOfFile (hFile=0x1e8) returned 1 [0160.403] SetEndOfFile (hFile=0x1e8) returned 1 [0160.420] SetEndOfFile (hFile=0x1e8) returned 1 [0160.427] SetEndOfFile (hFile=0x1e8) returned 1 [0160.434] SetEndOfFile (hFile=0x1e8) returned 1 [0160.440] SetEndOfFile (hFile=0x1e8) returned 1 [0160.447] SetEndOfFile (hFile=0x1e8) returned 1 [0160.454] SetEndOfFile (hFile=0x1e8) returned 1 [0160.460] SetEndOfFile (hFile=0x1e8) returned 1 [0160.468] SetEndOfFile (hFile=0x1e8) returned 1 [0160.473] SetEndOfFile (hFile=0x1e8) returned 1 [0160.482] SetEndOfFile (hFile=0x1e8) returned 1 [0160.491] SetEndOfFile (hFile=0x1e8) returned 1 [0160.499] SetEndOfFile (hFile=0x1e8) returned 1 [0160.508] SetEndOfFile (hFile=0x1e8) returned 1 [0160.515] SetEndOfFile (hFile=0x1e8) returned 1 [0160.525] SetEndOfFile (hFile=0x1e8) returned 1 [0160.531] SetEndOfFile (hFile=0x1e8) returned 1 [0160.537] SetEndOfFile (hFile=0x1e8) returned 1 [0160.547] SetEndOfFile (hFile=0x1e8) returned 1 [0160.553] SetEndOfFile (hFile=0x1e8) returned 1 [0160.560] SetEndOfFile (hFile=0x1e8) returned 1 [0160.566] SetEndOfFile (hFile=0x1e8) returned 1 [0160.573] SetEndOfFile (hFile=0x1e8) returned 1 [0160.579] SetEndOfFile (hFile=0x1e8) returned 1 [0160.585] SetEndOfFile (hFile=0x1e8) returned 1 [0160.591] SetEndOfFile (hFile=0x1e8) returned 1 [0160.595] SetEndOfFile (hFile=0x1e8) returned 1 [0160.601] SetEndOfFile (hFile=0x1e8) returned 1 [0160.606] SetEndOfFile (hFile=0x1e8) returned 1 [0160.611] SetEndOfFile (hFile=0x1e8) returned 1 [0160.616] SetEndOfFile (hFile=0x1e8) returned 1 [0160.621] SetEndOfFile (hFile=0x1e8) returned 1 [0160.626] SetEndOfFile (hFile=0x1e8) returned 1 [0160.631] SetEndOfFile (hFile=0x1e8) returned 1 [0160.637] SetEndOfFile (hFile=0x1e8) returned 1 [0160.642] SetEndOfFile (hFile=0x1e8) returned 1 [0160.646] SetEndOfFile (hFile=0x1e8) returned 1 [0160.652] SetEndOfFile (hFile=0x1e8) returned 1 [0160.657] SetEndOfFile (hFile=0x1e8) returned 1 [0160.665] SetEndOfFile (hFile=0x1e8) returned 1 [0160.675] SetEndOfFile (hFile=0x1e8) returned 1 [0160.680] SetEndOfFile (hFile=0x1e8) returned 1 [0160.686] SetEndOfFile (hFile=0x1e8) returned 1 [0160.692] SetEndOfFile (hFile=0x1e8) returned 1 [0160.697] SetEndOfFile (hFile=0x1e8) returned 1 [0160.707] SetEndOfFile (hFile=0x1e8) returned 1 [0160.713] SetEndOfFile (hFile=0x1e8) returned 1 [0160.718] SetEndOfFile (hFile=0x1e8) returned 1 [0160.723] SetEndOfFile (hFile=0x1e8) returned 1 [0160.729] SetEndOfFile (hFile=0x1e8) returned 1 [0160.734] SetEndOfFile (hFile=0x1e8) returned 1 [0160.738] SetEndOfFile (hFile=0x1e8) returned 1 [0160.743] SetEndOfFile (hFile=0x1e8) returned 1 [0160.751] SetEndOfFile (hFile=0x1e8) returned 1 [0160.756] SetEndOfFile (hFile=0x1e8) returned 1 [0160.762] SetEndOfFile (hFile=0x1e8) returned 1 [0160.768] SetEndOfFile (hFile=0x1e8) returned 1 [0160.773] SetEndOfFile (hFile=0x1e8) returned 1 [0160.778] SetEndOfFile (hFile=0x1e8) returned 1 [0160.784] SetEndOfFile (hFile=0x1e8) returned 1 [0160.792] SetEndOfFile (hFile=0x1e8) returned 1 [0160.799] SetEndOfFile (hFile=0x1e8) returned 1 [0160.807] SetEndOfFile (hFile=0x1e8) returned 1 [0160.813] SetEndOfFile (hFile=0x1e8) returned 1 [0160.823] SetEndOfFile (hFile=0x1e8) returned 1 [0160.834] SetEndOfFile (hFile=0x1e8) returned 1 [0160.844] SetEndOfFile (hFile=0x1e8) returned 1 [0160.850] SetEndOfFile (hFile=0x1e8) returned 1 [0160.857] SetEndOfFile (hFile=0x1e8) returned 1 [0160.862] SetEndOfFile (hFile=0x1e8) returned 1 [0160.867] SetEndOfFile (hFile=0x1e8) returned 1 [0160.873] SetEndOfFile (hFile=0x1e8) returned 1 [0160.880] SetEndOfFile (hFile=0x1e8) returned 1 [0160.885] SetEndOfFile (hFile=0x1e8) returned 1 [0160.893] SetEndOfFile (hFile=0x1e8) returned 1 [0160.897] SetEndOfFile (hFile=0x1e8) returned 1 [0160.903] SetEndOfFile (hFile=0x1e8) returned 1 [0160.907] SetEndOfFile (hFile=0x1e8) returned 1 [0160.914] SetEndOfFile (hFile=0x1e8) returned 1 [0160.921] SetEndOfFile (hFile=0x1e8) returned 1 [0160.928] SetEndOfFile (hFile=0x1e8) returned 1 [0160.939] SetEndOfFile (hFile=0x1e8) returned 1 [0160.946] SetEndOfFile (hFile=0x1e8) returned 1 [0160.953] SetEndOfFile (hFile=0x1e8) returned 1 [0160.961] SetEndOfFile (hFile=0x1e8) returned 1 [0160.967] SetEndOfFile (hFile=0x1e8) returned 1 [0160.973] SetEndOfFile (hFile=0x1e8) returned 1 [0160.978] SetEndOfFile (hFile=0x1e8) returned 1 [0160.984] SetEndOfFile (hFile=0x1e8) returned 1 [0160.991] SetEndOfFile (hFile=0x1e8) returned 1 [0161.000] SetEndOfFile (hFile=0x1e8) returned 1 [0161.008] SetEndOfFile (hFile=0x1e8) returned 1 [0161.015] SetEndOfFile (hFile=0x1e8) returned 1 [0161.020] SetEndOfFile (hFile=0x1e8) returned 1 [0161.027] SetEndOfFile (hFile=0x1e8) returned 1 [0161.034] SetEndOfFile (hFile=0x1e8) returned 1 [0161.039] SetEndOfFile (hFile=0x1e8) returned 1 [0161.045] SetEndOfFile (hFile=0x1e8) returned 1 [0161.051] SetEndOfFile (hFile=0x1e8) returned 1 [0161.057] SetEndOfFile (hFile=0x1e8) returned 1 [0161.064] SetEndOfFile (hFile=0x1e8) returned 1 [0161.070] SetEndOfFile (hFile=0x1e8) returned 1 [0161.092] SetEndOfFile (hFile=0x1e8) returned 1 [0161.099] SetEndOfFile (hFile=0x1e8) returned 1 [0161.104] SetEndOfFile (hFile=0x1e8) returned 1 [0161.110] SetEndOfFile (hFile=0x1e8) returned 1 [0161.115] SetEndOfFile (hFile=0x1e8) returned 1 [0161.124] SetEndOfFile (hFile=0x1e8) returned 1 [0161.130] SetEndOfFile (hFile=0x1e8) returned 1 [0161.137] SetEndOfFile (hFile=0x1e8) returned 1 [0161.143] SetEndOfFile (hFile=0x1e8) returned 1 [0161.149] SetEndOfFile (hFile=0x1e8) returned 1 [0161.154] SetEndOfFile (hFile=0x1e8) returned 1 [0161.161] SetEndOfFile (hFile=0x1e8) returned 1 [0161.170] SetEndOfFile (hFile=0x1e8) returned 1 [0161.179] SetEndOfFile (hFile=0x1e8) returned 1 [0161.189] SetEndOfFile (hFile=0x1e8) returned 1 [0161.204] SetEndOfFile (hFile=0x1e8) returned 1 [0161.211] SetEndOfFile (hFile=0x1e8) returned 1 [0161.217] SetEndOfFile (hFile=0x1e8) returned 1 [0161.222] SetEndOfFile (hFile=0x1e8) returned 1 [0161.228] SetEndOfFile (hFile=0x1e8) returned 1 [0161.234] SetEndOfFile (hFile=0x1e8) returned 1 [0161.241] SetEndOfFile (hFile=0x1e8) returned 1 [0161.248] SetEndOfFile (hFile=0x1e8) returned 1 [0161.254] SetEndOfFile (hFile=0x1e8) returned 1 [0161.261] SetEndOfFile (hFile=0x1e8) returned 1 [0161.270] SetEndOfFile (hFile=0x1e8) returned 1 [0161.276] SetEndOfFile (hFile=0x1e8) returned 1 [0161.284] SetEndOfFile (hFile=0x1e8) returned 1 [0161.290] SetEndOfFile (hFile=0x1e8) returned 1 [0161.296] SetEndOfFile (hFile=0x1e8) returned 1 [0161.304] SetEndOfFile (hFile=0x1e8) returned 1 [0161.313] SetEndOfFile (hFile=0x1e8) returned 1 [0161.318] SetEndOfFile (hFile=0x1e8) returned 1 [0161.324] SetEndOfFile (hFile=0x1e8) returned 1 [0161.329] SetEndOfFile (hFile=0x1e8) returned 1 [0161.334] SetEndOfFile (hFile=0x1e8) returned 1 [0161.340] SetEndOfFile (hFile=0x1e8) returned 1 [0161.345] SetEndOfFile (hFile=0x1e8) returned 1 [0161.351] SetEndOfFile (hFile=0x1e8) returned 1 [0161.363] SetEndOfFile (hFile=0x1e8) returned 1 [0161.368] SetEndOfFile (hFile=0x1e8) returned 1 [0161.374] SetEndOfFile (hFile=0x1e8) returned 1 [0161.379] SetEndOfFile (hFile=0x1e8) returned 1 [0161.384] SetEndOfFile (hFile=0x1e8) returned 1 [0161.391] SetEndOfFile (hFile=0x1e8) returned 1 [0161.396] SetEndOfFile (hFile=0x1e8) returned 1 [0161.401] SetEndOfFile (hFile=0x1e8) returned 1 [0161.406] SetEndOfFile (hFile=0x1e8) returned 1 [0161.411] SetEndOfFile (hFile=0x1e8) returned 1 [0161.419] SetEndOfFile (hFile=0x1e8) returned 1 [0161.424] SetEndOfFile (hFile=0x1e8) returned 1 [0161.429] SetEndOfFile (hFile=0x1e8) returned 1 [0161.435] SetEndOfFile (hFile=0x1e8) returned 1 [0161.449] SetEndOfFile (hFile=0x1e8) returned 1 [0161.454] SetEndOfFile (hFile=0x1e8) returned 1 [0161.459] SetEndOfFile (hFile=0x1e8) returned 1 [0161.465] SetEndOfFile (hFile=0x1e8) returned 1 [0161.470] SetEndOfFile (hFile=0x1e8) returned 1 [0161.475] SetEndOfFile (hFile=0x1e8) returned 1 [0161.481] SetEndOfFile (hFile=0x1e8) returned 1 [0161.486] SetEndOfFile (hFile=0x1e8) returned 1 [0161.491] SetEndOfFile (hFile=0x1e8) returned 1 [0161.495] SetEndOfFile (hFile=0x1e8) returned 1 [0161.500] SetEndOfFile (hFile=0x1e8) returned 1 [0161.504] SetEndOfFile (hFile=0x1e8) returned 1 [0161.512] SetEndOfFile (hFile=0x1e8) returned 1 [0161.519] SetEndOfFile (hFile=0x1e8) returned 1 [0161.525] SetEndOfFile (hFile=0x1e8) returned 1 [0161.529] SetEndOfFile (hFile=0x1e8) returned 1 [0161.535] SetEndOfFile (hFile=0x1e8) returned 1 [0161.540] SetEndOfFile (hFile=0x1e8) returned 1 [0161.545] SetEndOfFile (hFile=0x1e8) returned 1 [0161.551] SetEndOfFile (hFile=0x1e8) returned 1 [0161.557] SetEndOfFile (hFile=0x1e8) returned 1 [0161.563] SetEndOfFile (hFile=0x1e8) returned 1 [0161.569] SetEndOfFile (hFile=0x1e8) returned 1 [0161.576] SetEndOfFile (hFile=0x1e8) returned 1 [0161.581] SetEndOfFile (hFile=0x1e8) returned 1 [0161.587] SetEndOfFile (hFile=0x1e8) returned 1 [0161.594] SetEndOfFile (hFile=0x1e8) returned 1 [0161.599] SetEndOfFile (hFile=0x1e8) returned 1 [0161.605] SetEndOfFile (hFile=0x1e8) returned 1 [0161.610] SetEndOfFile (hFile=0x1e8) returned 1 [0161.615] SetEndOfFile (hFile=0x1e8) returned 1 [0161.619] SetEndOfFile (hFile=0x1e8) returned 1 [0161.624] SetEndOfFile (hFile=0x1e8) returned 1 [0161.629] SetEndOfFile (hFile=0x1e8) returned 1 [0161.634] SetEndOfFile (hFile=0x1e8) returned 1 [0161.659] SetEndOfFile (hFile=0x1e8) returned 1 [0161.664] SetEndOfFile (hFile=0x1e8) returned 1 [0161.669] SetEndOfFile (hFile=0x1e8) returned 1 [0161.679] SetEndOfFile (hFile=0x1e8) returned 1 [0161.685] SetEndOfFile (hFile=0x1e8) returned 1 [0161.690] SetEndOfFile (hFile=0x1e8) returned 1 [0161.697] SetEndOfFile (hFile=0x1e8) returned 1 [0161.703] SetEndOfFile (hFile=0x1e8) returned 1 [0161.707] SetEndOfFile (hFile=0x1e8) returned 1 [0161.718] SetEndOfFile (hFile=0x1e8) returned 1 [0161.723] SetEndOfFile (hFile=0x1e8) returned 1 [0161.729] SetEndOfFile (hFile=0x1e8) returned 1 [0161.734] SetEndOfFile (hFile=0x1e8) returned 1 [0161.739] SetEndOfFile (hFile=0x1e8) returned 1 [0161.743] SetEndOfFile (hFile=0x1e8) returned 1 [0161.750] SetEndOfFile (hFile=0x1e8) returned 1 [0161.758] SetEndOfFile (hFile=0x1e8) returned 1 [0161.775] SetEndOfFile (hFile=0x1e8) returned 1 [0161.803] SetEndOfFile (hFile=0x1e8) returned 1 [0161.869] SetEndOfFile (hFile=0x1e8) returned 1 [0161.874] SetEndOfFile (hFile=0x1e8) returned 1 [0161.880] SetEndOfFile (hFile=0x1e8) returned 1 [0161.906] SetEndOfFile (hFile=0x1e8) returned 1 [0161.913] SetEndOfFile (hFile=0x1e8) returned 1 [0161.918] SetEndOfFile (hFile=0x1e8) returned 1 [0161.923] SetEndOfFile (hFile=0x1e8) returned 1 [0161.929] SetEndOfFile (hFile=0x1e8) returned 1 [0161.934] SetEndOfFile (hFile=0x1e8) returned 1 [0161.947] SetEndOfFile (hFile=0x1e8) returned 1 [0161.953] SetEndOfFile (hFile=0x1e8) returned 1 [0161.960] SetEndOfFile (hFile=0x1e8) returned 1 [0161.967] SetEndOfFile (hFile=0x1e8) returned 1 [0161.975] SetEndOfFile (hFile=0x1e8) returned 1 [0161.986] SetEndOfFile (hFile=0x1e8) returned 1 [0161.998] SetEndOfFile (hFile=0x1e8) returned 1 [0162.006] SetEndOfFile (hFile=0x1e8) returned 1 [0162.014] SetEndOfFile (hFile=0x1e8) returned 1 [0162.021] SetEndOfFile (hFile=0x1e8) returned 1 [0162.030] SetEndOfFile (hFile=0x1e8) returned 1 [0162.037] SetEndOfFile (hFile=0x1e8) returned 1 [0162.046] SetEndOfFile (hFile=0x1e8) returned 1 [0162.052] SetEndOfFile (hFile=0x1e8) returned 1 [0162.057] SetEndOfFile (hFile=0x1e8) returned 1 [0162.065] SetEndOfFile (hFile=0x1e8) returned 1 [0162.071] SetEndOfFile (hFile=0x1e8) returned 1 [0162.113] SetEndOfFile (hFile=0x1e8) returned 1 [0162.120] SetEndOfFile (hFile=0x1e8) returned 1 [0162.125] SetEndOfFile (hFile=0x1e8) returned 1 [0162.131] SetEndOfFile (hFile=0x1e8) returned 1 [0162.137] SetEndOfFile (hFile=0x1e8) returned 1 [0162.143] SetEndOfFile (hFile=0x1e8) returned 1 [0162.151] SetEndOfFile (hFile=0x1e8) returned 1 [0162.158] SetEndOfFile (hFile=0x1e8) returned 1 [0162.163] SetEndOfFile (hFile=0x1e8) returned 1 [0162.205] SetEndOfFile (hFile=0x1e8) returned 1 [0162.210] SetEndOfFile (hFile=0x1e8) returned 1 [0162.216] SetEndOfFile (hFile=0x1e8) returned 1 [0162.224] SetEndOfFile (hFile=0x1e8) returned 1 [0162.274] SetEndOfFile (hFile=0x1e8) returned 1 [0162.280] SetEndOfFile (hFile=0x1e8) returned 1 [0162.287] SetEndOfFile (hFile=0x1e8) returned 1 [0162.293] SetEndOfFile (hFile=0x1e8) returned 1 [0162.298] SetEndOfFile (hFile=0x1e8) returned 1 [0162.303] SetEndOfFile (hFile=0x1e8) returned 1 [0162.309] SetEndOfFile (hFile=0x1e8) returned 1 [0162.316] SetEndOfFile (hFile=0x1e8) returned 1 [0162.321] SetEndOfFile (hFile=0x1e8) returned 1 [0162.329] SetEndOfFile (hFile=0x1e8) returned 1 [0162.337] SetEndOfFile (hFile=0x1e8) returned 1 [0162.344] SetEndOfFile (hFile=0x1e8) returned 1 [0162.352] SetEndOfFile (hFile=0x1e8) returned 1 [0162.361] SetEndOfFile (hFile=0x1e8) returned 1 [0162.367] SetEndOfFile (hFile=0x1e8) returned 1 [0162.377] SetEndOfFile (hFile=0x1e8) returned 1 [0162.386] SetEndOfFile (hFile=0x1e8) returned 1 [0162.392] SetEndOfFile (hFile=0x1e8) returned 1 [0162.399] SetEndOfFile (hFile=0x1e8) returned 1 [0162.407] SetEndOfFile (hFile=0x1e8) returned 1 [0162.413] SetEndOfFile (hFile=0x1e8) returned 1 [0162.428] SetEndOfFile (hFile=0x1e8) returned 1 [0162.435] SetEndOfFile (hFile=0x1e8) returned 1 [0162.441] SetEndOfFile (hFile=0x1e8) returned 1 [0162.450] SetEndOfFile (hFile=0x1e8) returned 1 [0162.456] SetEndOfFile (hFile=0x1e8) returned 1 [0162.463] SetEndOfFile (hFile=0x1e8) returned 1 [0162.469] SetEndOfFile (hFile=0x1e8) returned 1 [0162.474] SetEndOfFile (hFile=0x1e8) returned 1 [0162.491] SetEndOfFile (hFile=0x1e8) returned 1 [0162.498] SetEndOfFile (hFile=0x1e8) returned 1 [0162.506] SetEndOfFile (hFile=0x1e8) returned 1 [0162.512] SetEndOfFile (hFile=0x1e8) returned 1 [0162.519] SetEndOfFile (hFile=0x1e8) returned 1 [0162.527] SetEndOfFile (hFile=0x1e8) returned 1 [0162.534] SetEndOfFile (hFile=0x1e8) returned 1 [0162.540] SetEndOfFile (hFile=0x1e8) returned 1 [0162.551] SetEndOfFile (hFile=0x1e8) returned 1 [0162.558] SetEndOfFile (hFile=0x1e8) returned 1 [0162.564] SetEndOfFile (hFile=0x1e8) returned 1 [0162.571] SetEndOfFile (hFile=0x1e8) returned 1 [0162.578] SetEndOfFile (hFile=0x1e8) returned 1 [0162.585] SetEndOfFile (hFile=0x1e8) returned 1 [0162.592] SetEndOfFile (hFile=0x1e8) returned 1 [0162.599] SetEndOfFile (hFile=0x1e8) returned 1 [0162.605] SetEndOfFile (hFile=0x1e8) returned 1 [0162.621] SetEndOfFile (hFile=0x1e8) returned 1 [0162.627] SetEndOfFile (hFile=0x1e8) returned 1 [0162.633] SetEndOfFile (hFile=0x1e8) returned 1 [0162.639] SetEndOfFile (hFile=0x1e8) returned 1 [0162.645] SetEndOfFile (hFile=0x1e8) returned 1 [0162.651] SetEndOfFile (hFile=0x1e8) returned 1 [0162.657] SetEndOfFile (hFile=0x1e8) returned 1 [0162.664] SetEndOfFile (hFile=0x1e8) returned 1 [0162.691] SetEndOfFile (hFile=0x1e8) returned 1 [0162.701] SetEndOfFile (hFile=0x1e8) returned 1 [0162.710] SetEndOfFile (hFile=0x1e8) returned 1 [0162.717] SetEndOfFile (hFile=0x1e8) returned 1 [0162.724] SetEndOfFile (hFile=0x1e8) returned 1 [0162.734] SetEndOfFile (hFile=0x1e8) returned 1 [0162.741] SetEndOfFile (hFile=0x1e8) returned 1 [0162.748] SetEndOfFile (hFile=0x1e8) returned 1 [0162.756] SetEndOfFile (hFile=0x1e8) returned 1 [0162.763] SetEndOfFile (hFile=0x1e8) returned 1 [0162.772] SetEndOfFile (hFile=0x1e8) returned 1 [0162.780] SetEndOfFile (hFile=0x1e8) returned 1 [0162.787] SetEndOfFile (hFile=0x1e8) returned 1 [0162.794] SetEndOfFile (hFile=0x1e8) returned 1 [0162.801] SetEndOfFile (hFile=0x1e8) returned 1 [0162.808] SetEndOfFile (hFile=0x1e8) returned 1 [0162.815] SetEndOfFile (hFile=0x1e8) returned 1 [0162.821] SetEndOfFile (hFile=0x1e8) returned 1 [0162.836] SetEndOfFile (hFile=0x1e8) returned 1 [0162.843] SetEndOfFile (hFile=0x1e8) returned 1 [0162.849] SetEndOfFile (hFile=0x1e8) returned 1 [0162.856] SetEndOfFile (hFile=0x1e8) returned 1 [0162.863] SetEndOfFile (hFile=0x1e8) returned 1 [0162.869] SetEndOfFile (hFile=0x1e8) returned 1 [0162.876] SetEndOfFile (hFile=0x1e8) returned 1 [0162.883] SetEndOfFile (hFile=0x1e8) returned 1 [0162.892] SetEndOfFile (hFile=0x1e8) returned 1 [0162.902] SetEndOfFile (hFile=0x1e8) returned 1 [0162.908] SetEndOfFile (hFile=0x1e8) returned 1 [0162.914] SetEndOfFile (hFile=0x1e8) returned 1 [0162.920] SetEndOfFile (hFile=0x1e8) returned 1 [0162.927] SetEndOfFile (hFile=0x1e8) returned 1 [0162.935] SetEndOfFile (hFile=0x1e8) returned 1 [0162.942] SetEndOfFile (hFile=0x1e8) returned 1 [0162.949] SetEndOfFile (hFile=0x1e8) returned 1 [0162.954] SetEndOfFile (hFile=0x1e8) returned 1 [0162.961] SetEndOfFile (hFile=0x1e8) returned 1 [0162.968] SetEndOfFile (hFile=0x1e8) returned 1 [0162.974] SetEndOfFile (hFile=0x1e8) returned 1 [0162.980] SetEndOfFile (hFile=0x1e8) returned 1 [0162.986] SetEndOfFile (hFile=0x1e8) returned 1 [0162.992] SetEndOfFile (hFile=0x1e8) returned 1 [0162.998] SetEndOfFile (hFile=0x1e8) returned 1 [0163.010] SetEndOfFile (hFile=0x1e8) returned 1 [0163.021] SetEndOfFile (hFile=0x1e8) returned 1 [0163.027] SetEndOfFile (hFile=0x1e8) returned 1 [0163.033] SetEndOfFile (hFile=0x1e8) returned 1 [0163.039] SetEndOfFile (hFile=0x1e8) returned 1 [0163.044] SetEndOfFile (hFile=0x1e8) returned 1 [0163.050] SetEndOfFile (hFile=0x1e8) returned 1 [0163.054] SetEndOfFile (hFile=0x1e8) returned 1 [0163.059] SetEndOfFile (hFile=0x1e8) returned 1 [0163.064] SetEndOfFile (hFile=0x1e8) returned 1 [0163.070] SetEndOfFile (hFile=0x1e8) returned 1 [0163.089] SetEndOfFile (hFile=0x1e8) returned 1 [0163.094] SetEndOfFile (hFile=0x1e8) returned 1 [0163.100] SetEndOfFile (hFile=0x1e8) returned 1 [0163.107] SetEndOfFile (hFile=0x1e8) returned 1 [0163.113] SetEndOfFile (hFile=0x1e8) returned 1 [0163.122] SetEndOfFile (hFile=0x1e8) returned 1 [0163.128] SetEndOfFile (hFile=0x1e8) returned 1 [0163.133] SetEndOfFile (hFile=0x1e8) returned 1 [0163.138] SetEndOfFile (hFile=0x1e8) returned 1 [0163.142] SetEndOfFile (hFile=0x1e8) returned 1 [0163.148] SetEndOfFile (hFile=0x1e8) returned 1 [0163.152] SetEndOfFile (hFile=0x1e8) returned 1 [0163.158] SetEndOfFile (hFile=0x1e8) returned 1 [0163.163] SetEndOfFile (hFile=0x1e8) returned 1 [0163.168] SetEndOfFile (hFile=0x1e8) returned 1 [0163.177] SetEndOfFile (hFile=0x1e8) returned 1 [0163.184] SetEndOfFile (hFile=0x1e8) returned 1 [0163.189] SetEndOfFile (hFile=0x1e8) returned 1 [0163.196] SetEndOfFile (hFile=0x1e8) returned 1 [0163.201] SetEndOfFile (hFile=0x1e8) returned 1 [0163.206] SetEndOfFile (hFile=0x1e8) returned 1 [0163.212] SetEndOfFile (hFile=0x1e8) returned 1 [0163.218] SetEndOfFile (hFile=0x1e8) returned 1 [0163.223] SetEndOfFile (hFile=0x1e8) returned 1 [0163.229] SetEndOfFile (hFile=0x1e8) returned 1 [0163.234] SetEndOfFile (hFile=0x1e8) returned 1 [0163.238] SetEndOfFile (hFile=0x1e8) returned 1 [0163.245] SetEndOfFile (hFile=0x1e8) returned 1 [0163.250] SetEndOfFile (hFile=0x1e8) returned 1 [0163.255] SetEndOfFile (hFile=0x1e8) returned 1 [0163.260] SetEndOfFile (hFile=0x1e8) returned 1 [0163.264] SetEndOfFile (hFile=0x1e8) returned 1 [0163.269] SetEndOfFile (hFile=0x1e8) returned 1 [0163.274] SetEndOfFile (hFile=0x1e8) returned 1 [0163.282] SetEndOfFile (hFile=0x1e8) returned 1 [0163.289] SetEndOfFile (hFile=0x1e8) returned 1 [0163.296] SetEndOfFile (hFile=0x1e8) returned 1 [0163.304] SetEndOfFile (hFile=0x1e8) returned 1 [0163.311] SetEndOfFile (hFile=0x1e8) returned 1 [0163.317] SetEndOfFile (hFile=0x1e8) returned 1 [0163.332] SetEndOfFile (hFile=0x1e8) returned 1 [0163.343] SetEndOfFile (hFile=0x1e8) returned 1 [0163.348] SetEndOfFile (hFile=0x1e8) returned 1 [0163.354] SetEndOfFile (hFile=0x1e8) returned 1 [0163.359] SetEndOfFile (hFile=0x1e8) returned 1 [0163.366] SetEndOfFile (hFile=0x1e8) returned 1 [0163.372] SetEndOfFile (hFile=0x1e8) returned 1 [0163.378] SetEndOfFile (hFile=0x1e8) returned 1 [0163.384] SetEndOfFile (hFile=0x1e8) returned 1 [0163.390] SetEndOfFile (hFile=0x1e8) returned 1 [0163.396] SetEndOfFile (hFile=0x1e8) returned 1 [0163.402] SetEndOfFile (hFile=0x1e8) returned 1 [0163.407] SetEndOfFile (hFile=0x1e8) returned 1 [0163.412] SetEndOfFile (hFile=0x1e8) returned 1 [0163.419] SetEndOfFile (hFile=0x1e8) returned 1 [0163.426] SetEndOfFile (hFile=0x1e8) returned 1 [0163.434] SetEndOfFile (hFile=0x1e8) returned 1 [0163.441] SetEndOfFile (hFile=0x1e8) returned 1 [0163.447] SetEndOfFile (hFile=0x1e8) returned 1 [0163.452] SetEndOfFile (hFile=0x1e8) returned 1 [0163.457] SetEndOfFile (hFile=0x1e8) returned 1 [0163.462] SetEndOfFile (hFile=0x1e8) returned 1 [0163.471] SetEndOfFile (hFile=0x1e8) returned 1 [0163.477] SetEndOfFile (hFile=0x1e8) returned 1 [0163.484] SetEndOfFile (hFile=0x1e8) returned 1 [0163.500] SetEndOfFile (hFile=0x1e8) returned 1 [0163.526] SetEndOfFile (hFile=0x1e8) returned 1 [0163.531] SetEndOfFile (hFile=0x1e8) returned 1 [0163.537] SetEndOfFile (hFile=0x1e8) returned 1 [0163.542] SetEndOfFile (hFile=0x1e8) returned 1 [0163.548] SetEndOfFile (hFile=0x1e8) returned 1 [0163.554] SetEndOfFile (hFile=0x1e8) returned 1 [0163.559] SetEndOfFile (hFile=0x1e8) returned 1 [0163.564] SetEndOfFile (hFile=0x1e8) returned 1 [0163.573] SetEndOfFile (hFile=0x1e8) returned 1 [0163.580] SetEndOfFile (hFile=0x1e8) returned 1 [0163.586] SetEndOfFile (hFile=0x1e8) returned 1 [0163.592] SetEndOfFile (hFile=0x1e8) returned 1 [0163.599] SetEndOfFile (hFile=0x1e8) returned 1 [0163.606] SetEndOfFile (hFile=0x1e8) returned 1 [0163.614] SetEndOfFile (hFile=0x1e8) returned 1 [0163.623] SetEndOfFile (hFile=0x1e8) returned 1 [0163.629] SetEndOfFile (hFile=0x1e8) returned 1 [0163.637] SetEndOfFile (hFile=0x1e8) returned 1 [0163.644] SetEndOfFile (hFile=0x1e8) returned 1 [0163.650] SetEndOfFile (hFile=0x1e8) returned 1 [0163.659] SetEndOfFile (hFile=0x1e8) returned 1 [0163.667] SetEndOfFile (hFile=0x1e8) returned 1 [0163.674] SetEndOfFile (hFile=0x1e8) returned 1 [0163.681] SetEndOfFile (hFile=0x1e8) returned 1 [0163.692] SetEndOfFile (hFile=0x1e8) returned 1 [0163.702] SetEndOfFile (hFile=0x1e8) returned 1 [0163.709] SetEndOfFile (hFile=0x1e8) returned 1 [0163.716] SetEndOfFile (hFile=0x1e8) returned 1 [0163.723] SetEndOfFile (hFile=0x1e8) returned 1 [0163.730] SetEndOfFile (hFile=0x1e8) returned 1 [0163.737] SetEndOfFile (hFile=0x1e8) returned 1 [0163.745] SetEndOfFile (hFile=0x1e8) returned 1 [0163.751] SetEndOfFile (hFile=0x1e8) returned 1 [0163.757] SetEndOfFile (hFile=0x1e8) returned 1 [0163.765] SetEndOfFile (hFile=0x1e8) returned 1 [0163.771] SetEndOfFile (hFile=0x1e8) returned 1 [0163.779] SetEndOfFile (hFile=0x1e8) returned 1 [0163.786] SetEndOfFile (hFile=0x1e8) returned 1 [0163.793] SetEndOfFile (hFile=0x1e8) returned 1 [0163.801] SetEndOfFile (hFile=0x1e8) returned 1 [0163.808] SetEndOfFile (hFile=0x1e8) returned 1 [0163.818] SetEndOfFile (hFile=0x1e8) returned 1 [0163.828] SetEndOfFile (hFile=0x1e8) returned 1 [0163.835] SetEndOfFile (hFile=0x1e8) returned 1 [0163.841] SetEndOfFile (hFile=0x1e8) returned 1 [0163.849] SetEndOfFile (hFile=0x1e8) returned 1 [0163.858] SetEndOfFile (hFile=0x1e8) returned 1 [0163.865] SetEndOfFile (hFile=0x1e8) returned 1 [0163.872] SetEndOfFile (hFile=0x1e8) returned 1 [0163.892] SetEndOfFile (hFile=0x1e8) returned 1 [0163.923] SetEndOfFile (hFile=0x1e8) returned 1 [0163.935] SetEndOfFile (hFile=0x1e8) returned 1 [0163.942] SetEndOfFile (hFile=0x1e8) returned 1 [0163.948] SetEndOfFile (hFile=0x1e8) returned 1 [0163.955] SetEndOfFile (hFile=0x1e8) returned 1 [0163.962] SetEndOfFile (hFile=0x1e8) returned 1 [0163.968] SetEndOfFile (hFile=0x1e8) returned 1 [0163.974] SetEndOfFile (hFile=0x1e8) returned 1 [0163.981] SetEndOfFile (hFile=0x1e8) returned 1 [0163.989] SetEndOfFile (hFile=0x1e8) returned 1 [0163.995] SetEndOfFile (hFile=0x1e8) returned 1 [0164.003] SetEndOfFile (hFile=0x1e8) returned 1 [0164.012] SetEndOfFile (hFile=0x1e8) returned 1 [0164.020] SetEndOfFile (hFile=0x1e8) returned 1 [0164.026] SetEndOfFile (hFile=0x1e8) returned 1 [0164.031] SetEndOfFile (hFile=0x1e8) returned 1 [0164.036] SetEndOfFile (hFile=0x1e8) returned 1 [0164.041] SetEndOfFile (hFile=0x1e8) returned 1 [0164.047] SetEndOfFile (hFile=0x1e8) returned 1 [0164.052] SetEndOfFile (hFile=0x1e8) returned 1 [0164.057] SetEndOfFile (hFile=0x1e8) returned 1 [0164.062] SetEndOfFile (hFile=0x1e8) returned 1 [0164.068] SetEndOfFile (hFile=0x1e8) returned 1 [0164.073] SetEndOfFile (hFile=0x1e8) returned 1 [0164.078] SetEndOfFile (hFile=0x1e8) returned 1 [0164.100] SetEndOfFile (hFile=0x1e8) returned 1 [0164.106] SetEndOfFile (hFile=0x1e8) returned 1 [0164.116] SetEndOfFile (hFile=0x1e8) returned 1 [0164.122] SetEndOfFile (hFile=0x1e8) returned 1 [0164.130] SetEndOfFile (hFile=0x1e8) returned 1 [0164.135] SetEndOfFile (hFile=0x1e8) returned 1 [0164.140] SetEndOfFile (hFile=0x1e8) returned 1 [0164.146] SetEndOfFile (hFile=0x1e8) returned 1 [0164.151] SetEndOfFile (hFile=0x1e8) returned 1 [0164.156] SetEndOfFile (hFile=0x1e8) returned 1 [0164.162] SetEndOfFile (hFile=0x1e8) returned 1 [0164.166] SetEndOfFile (hFile=0x1e8) returned 1 [0164.173] SetEndOfFile (hFile=0x1e8) returned 1 [0164.179] SetEndOfFile (hFile=0x1e8) returned 1 [0164.183] SetEndOfFile (hFile=0x1e8) returned 1 [0164.189] SetEndOfFile (hFile=0x1e8) returned 1 [0164.196] SetEndOfFile (hFile=0x1e8) returned 1 [0164.200] SetEndOfFile (hFile=0x1e8) returned 1 [0164.206] SetEndOfFile (hFile=0x1e8) returned 1 [0164.211] SetEndOfFile (hFile=0x1e8) returned 1 [0164.216] SetEndOfFile (hFile=0x1e8) returned 1 [0164.221] SetEndOfFile (hFile=0x1e8) returned 1 [0164.226] SetEndOfFile (hFile=0x1e8) returned 1 [0164.231] SetEndOfFile (hFile=0x1e8) returned 1 [0164.237] SetEndOfFile (hFile=0x1e8) returned 1 [0164.242] SetEndOfFile (hFile=0x1e8) returned 1 [0164.249] SetEndOfFile (hFile=0x1e8) returned 1 [0164.254] SetEndOfFile (hFile=0x1e8) returned 1 [0164.262] SetEndOfFile (hFile=0x1e8) returned 1 [0164.271] SetEndOfFile (hFile=0x1e8) returned 1 [0164.275] SetEndOfFile (hFile=0x1e8) returned 1 [0164.281] SetEndOfFile (hFile=0x1e8) returned 1 [0164.286] SetEndOfFile (hFile=0x1e8) returned 1 [0164.291] SetEndOfFile (hFile=0x1e8) returned 1 [0164.297] SetEndOfFile (hFile=0x1e8) returned 1 [0164.302] SetEndOfFile (hFile=0x1e8) returned 1 [0164.307] SetEndOfFile (hFile=0x1e8) returned 1 [0164.312] SetEndOfFile (hFile=0x1e8) returned 1 [0164.317] SetEndOfFile (hFile=0x1e8) returned 1 [0164.323] SetEndOfFile (hFile=0x1e8) returned 1 [0164.329] SetEndOfFile (hFile=0x1e8) returned 1 [0164.335] SetEndOfFile (hFile=0x1e8) returned 1 [0164.340] SetEndOfFile (hFile=0x1e8) returned 1 [0164.345] SetEndOfFile (hFile=0x1e8) returned 1 [0164.350] SetEndOfFile (hFile=0x1e8) returned 1 [0164.355] SetEndOfFile (hFile=0x1e8) returned 1 [0164.359] SetEndOfFile (hFile=0x1e8) returned 1 [0164.363] SetEndOfFile (hFile=0x1e8) returned 1 [0164.368] SetEndOfFile (hFile=0x1e8) returned 1 [0164.373] SetEndOfFile (hFile=0x1e8) returned 1 [0164.379] SetEndOfFile (hFile=0x1e8) returned 1 [0164.384] SetEndOfFile (hFile=0x1e8) returned 1 [0164.393] SetEndOfFile (hFile=0x1e8) returned 1 [0164.398] SetEndOfFile (hFile=0x1e8) returned 1 [0164.419] SetEndOfFile (hFile=0x1e8) returned 1 [0164.424] SetEndOfFile (hFile=0x1e8) returned 1 [0164.434] SetEndOfFile (hFile=0x1e8) returned 1 [0164.439] SetEndOfFile (hFile=0x1e8) returned 1 [0164.445] SetEndOfFile (hFile=0x1e8) returned 1 [0164.452] SetEndOfFile (hFile=0x1e8) returned 1 [0164.457] SetEndOfFile (hFile=0x1e8) returned 1 [0164.470] SetEndOfFile (hFile=0x1e8) returned 1 [0164.475] SetEndOfFile (hFile=0x1e8) returned 1 [0164.481] SetEndOfFile (hFile=0x1e8) returned 1 [0164.485] SetEndOfFile (hFile=0x1e8) returned 1 [0164.491] SetEndOfFile (hFile=0x1e8) returned 1 [0164.496] SetEndOfFile (hFile=0x1e8) returned 1 [0164.509] SetEndOfFile (hFile=0x1e8) returned 1 [0164.515] SetEndOfFile (hFile=0x1e8) returned 1 [0164.519] SetEndOfFile (hFile=0x1e8) returned 1 [0164.525] SetEndOfFile (hFile=0x1e8) returned 1 [0164.529] SetEndOfFile (hFile=0x1e8) returned 1 [0164.535] SetEndOfFile (hFile=0x1e8) returned 1 [0164.540] SetEndOfFile (hFile=0x1e8) returned 1 [0164.545] SetEndOfFile (hFile=0x1e8) returned 1 [0164.550] SetEndOfFile (hFile=0x1e8) returned 1 [0164.558] SetEndOfFile (hFile=0x1e8) returned 1 [0164.562] SetEndOfFile (hFile=0x1e8) returned 1 [0164.573] SetEndOfFile (hFile=0x1e8) returned 1 [0164.581] SetEndOfFile (hFile=0x1e8) returned 1 [0164.588] SetEndOfFile (hFile=0x1e8) returned 1 [0164.596] SetEndOfFile (hFile=0x1e8) returned 1 [0164.603] SetEndOfFile (hFile=0x1e8) returned 1 [0164.609] SetEndOfFile (hFile=0x1e8) returned 1 [0164.618] SetEndOfFile (hFile=0x1e8) returned 1 [0164.625] SetEndOfFile (hFile=0x1e8) returned 1 [0164.632] SetEndOfFile (hFile=0x1e8) returned 1 [0164.639] SetEndOfFile (hFile=0x1e8) returned 1 [0164.646] SetEndOfFile (hFile=0x1e8) returned 1 [0164.651] SetEndOfFile (hFile=0x1e8) returned 1 [0164.657] SetEndOfFile (hFile=0x1e8) returned 1 [0164.663] SetEndOfFile (hFile=0x1e8) returned 1 [0164.669] SetEndOfFile (hFile=0x1e8) returned 1 [0164.675] SetEndOfFile (hFile=0x1e8) returned 1 [0164.683] SetEndOfFile (hFile=0x1e8) returned 1 [0164.696] SetEndOfFile (hFile=0x1e8) returned 1 [0164.702] SetEndOfFile (hFile=0x1e8) returned 1 [0164.709] SetEndOfFile (hFile=0x1e8) returned 1 [0164.716] SetEndOfFile (hFile=0x1e8) returned 1 [0164.722] SetEndOfFile (hFile=0x1e8) returned 1 [0164.731] SetEndOfFile (hFile=0x1e8) returned 1 [0164.741] SetEndOfFile (hFile=0x1e8) returned 1 [0164.747] SetEndOfFile (hFile=0x1e8) returned 1 [0164.754] SetEndOfFile (hFile=0x1e8) returned 1 [0164.764] SetEndOfFile (hFile=0x1e8) returned 1 [0164.770] SetEndOfFile (hFile=0x1e8) returned 1 [0164.777] SetEndOfFile (hFile=0x1e8) returned 1 [0164.783] SetEndOfFile (hFile=0x1e8) returned 1 [0164.790] SetEndOfFile (hFile=0x1e8) returned 1 [0164.797] SetEndOfFile (hFile=0x1e8) returned 1 [0164.805] SetEndOfFile (hFile=0x1e8) returned 1 [0164.811] SetEndOfFile (hFile=0x1e8) returned 1 [0164.817] SetEndOfFile (hFile=0x1e8) returned 1 [0164.822] SetEndOfFile (hFile=0x1e8) returned 1 [0164.828] SetEndOfFile (hFile=0x1e8) returned 1 [0164.834] SetEndOfFile (hFile=0x1e8) returned 1 [0164.841] SetEndOfFile (hFile=0x1e8) returned 1 [0164.847] SetEndOfFile (hFile=0x1e8) returned 1 [0164.854] SetEndOfFile (hFile=0x1e8) returned 1 [0164.861] SetEndOfFile (hFile=0x1e8) returned 1 [0164.868] SetEndOfFile (hFile=0x1e8) returned 1 [0164.874] SetEndOfFile (hFile=0x1e8) returned 1 [0164.881] SetEndOfFile (hFile=0x1e8) returned 1 [0164.887] SetEndOfFile (hFile=0x1e8) returned 1 [0164.893] SetEndOfFile (hFile=0x1e8) returned 1 [0164.900] SetEndOfFile (hFile=0x1e8) returned 1 [0164.907] SetEndOfFile (hFile=0x1e8) returned 1 [0164.917] SetEndOfFile (hFile=0x1e8) returned 1 [0164.923] SetEndOfFile (hFile=0x1e8) returned 1 [0164.930] SetEndOfFile (hFile=0x1e8) returned 1 [0164.939] SetEndOfFile (hFile=0x1e8) returned 1 [0164.947] SetEndOfFile (hFile=0x1e8) returned 1 [0164.954] SetEndOfFile (hFile=0x1e8) returned 1 [0164.961] SetEndOfFile (hFile=0x1e8) returned 1 [0164.966] SetEndOfFile (hFile=0x1e8) returned 1 [0164.972] SetEndOfFile (hFile=0x1e8) returned 1 [0164.977] SetEndOfFile (hFile=0x1e8) returned 1 [0164.984] SetEndOfFile (hFile=0x1e8) returned 1 [0164.991] SetEndOfFile (hFile=0x1e8) returned 1 [0164.998] SetEndOfFile (hFile=0x1e8) returned 1 [0165.004] SetEndOfFile (hFile=0x1e8) returned 1 [0165.010] SetEndOfFile (hFile=0x1e8) returned 1 [0165.017] SetEndOfFile (hFile=0x1e8) returned 1 [0165.023] SetEndOfFile (hFile=0x1e8) returned 1 [0165.029] SetEndOfFile (hFile=0x1e8) returned 1 [0165.038] SetEndOfFile (hFile=0x1e8) returned 1 [0165.044] SetEndOfFile (hFile=0x1e8) returned 1 [0165.050] SetEndOfFile (hFile=0x1e8) returned 1 [0165.057] SetEndOfFile (hFile=0x1e8) returned 1 [0165.063] SetEndOfFile (hFile=0x1e8) returned 1 [0165.070] SetEndOfFile (hFile=0x1e8) returned 1 [0165.077] SetEndOfFile (hFile=0x1e8) returned 1 [0165.110] SetEndOfFile (hFile=0x1e8) returned 1 [0165.123] SetEndOfFile (hFile=0x1e8) returned 1 [0165.128] SetEndOfFile (hFile=0x1e8) returned 1 [0165.136] SetEndOfFile (hFile=0x1e8) returned 1 [0165.141] SetEndOfFile (hFile=0x1e8) returned 1 [0165.145] SetEndOfFile (hFile=0x1e8) returned 1 [0165.150] SetEndOfFile (hFile=0x1e8) returned 1 [0165.155] SetEndOfFile (hFile=0x1e8) returned 1 [0165.162] SetEndOfFile (hFile=0x1e8) returned 1 [0165.169] SetEndOfFile (hFile=0x1e8) returned 1 [0165.176] SetEndOfFile (hFile=0x1e8) returned 1 [0165.184] SetEndOfFile (hFile=0x1e8) returned 1 [0165.192] SetEndOfFile (hFile=0x1e8) returned 1 [0165.199] SetEndOfFile (hFile=0x1e8) returned 1 [0165.205] SetEndOfFile (hFile=0x1e8) returned 1 [0165.217] SetEndOfFile (hFile=0x1e8) returned 1 [0165.225] SetEndOfFile (hFile=0x1e8) returned 1 [0165.230] SetEndOfFile (hFile=0x1e8) returned 1 [0165.235] SetEndOfFile (hFile=0x1e8) returned 1 [0165.240] SetEndOfFile (hFile=0x1e8) returned 1 [0165.244] SetEndOfFile (hFile=0x1e8) returned 1 [0165.250] SetEndOfFile (hFile=0x1e8) returned 1 [0165.255] SetEndOfFile (hFile=0x1e8) returned 1 [0165.259] SetEndOfFile (hFile=0x1e8) returned 1 [0165.264] SetEndOfFile (hFile=0x1e8) returned 1 [0165.269] SetEndOfFile (hFile=0x1e8) returned 1 [0165.278] SetEndOfFile (hFile=0x1e8) returned 1 [0165.283] SetEndOfFile (hFile=0x1e8) returned 1 [0165.287] SetEndOfFile (hFile=0x1e8) returned 1 [0165.294] SetEndOfFile (hFile=0x1e8) returned 1 [0165.298] SetEndOfFile (hFile=0x1e8) returned 1 [0165.304] SetEndOfFile (hFile=0x1e8) returned 1 [0165.309] SetEndOfFile (hFile=0x1e8) returned 1 [0165.313] SetEndOfFile (hFile=0x1e8) returned 1 [0165.322] SetEndOfFile (hFile=0x1e8) returned 1 [0165.327] SetEndOfFile (hFile=0x1e8) returned 1 [0165.332] SetEndOfFile (hFile=0x1e8) returned 1 [0165.339] SetEndOfFile (hFile=0x1e8) returned 1 [0165.344] SetEndOfFile (hFile=0x1e8) returned 1 [0165.349] SetEndOfFile (hFile=0x1e8) returned 1 [0165.353] SetEndOfFile (hFile=0x1e8) returned 1 [0165.358] SetEndOfFile (hFile=0x1e8) returned 1 [0165.363] SetEndOfFile (hFile=0x1e8) returned 1 [0165.368] SetEndOfFile (hFile=0x1e8) returned 1 [0165.373] SetEndOfFile (hFile=0x1e8) returned 1 [0165.378] SetEndOfFile (hFile=0x1e8) returned 1 [0165.383] SetEndOfFile (hFile=0x1e8) returned 1 [0165.388] SetEndOfFile (hFile=0x1e8) returned 1 [0165.393] SetEndOfFile (hFile=0x1e8) returned 1 [0165.398] SetEndOfFile (hFile=0x1e8) returned 1 [0165.402] SetEndOfFile (hFile=0x1e8) returned 1 [0165.406] SetEndOfFile (hFile=0x1e8) returned 1 [0165.414] SetEndOfFile (hFile=0x1e8) returned 1 [0165.418] SetEndOfFile (hFile=0x1e8) returned 1 [0165.423] SetEndOfFile (hFile=0x1e8) returned 1 [0165.431] SetEndOfFile (hFile=0x1e8) returned 1 [0165.436] SetEndOfFile (hFile=0x1e8) returned 1 [0165.441] SetEndOfFile (hFile=0x1e8) returned 1 [0165.447] SetEndOfFile (hFile=0x1e8) returned 1 [0165.451] SetEndOfFile (hFile=0x1e8) returned 1 [0165.458] SetEndOfFile (hFile=0x1e8) returned 1 [0165.463] SetEndOfFile (hFile=0x1e8) returned 1 [0165.467] SetEndOfFile (hFile=0x1e8) returned 1 [0165.473] SetEndOfFile (hFile=0x1e8) returned 1 [0165.478] SetEndOfFile (hFile=0x1e8) returned 1 [0165.482] SetEndOfFile (hFile=0x1e8) returned 1 [0165.487] SetEndOfFile (hFile=0x1e8) returned 1 [0165.492] SetEndOfFile (hFile=0x1e8) returned 1 [0165.496] SetEndOfFile (hFile=0x1e8) returned 1 [0165.512] SetEndOfFile (hFile=0x1e8) returned 1 [0165.519] SetEndOfFile (hFile=0x1e8) returned 1 [0165.525] SetEndOfFile (hFile=0x1e8) returned 1 [0165.531] SetEndOfFile (hFile=0x1e8) returned 1 [0165.537] SetEndOfFile (hFile=0x1e8) returned 1 [0165.544] SetEndOfFile (hFile=0x1e8) returned 1 [0165.550] SetEndOfFile (hFile=0x1e8) returned 1 [0165.560] SetEndOfFile (hFile=0x1e8) returned 1 [0165.567] SetEndOfFile (hFile=0x1e8) returned 1 [0165.577] SetEndOfFile (hFile=0x1e8) returned 1 [0165.584] SetEndOfFile (hFile=0x1e8) returned 1 [0165.591] SetEndOfFile (hFile=0x1e8) returned 1 [0165.600] SetEndOfFile (hFile=0x1e8) returned 1 [0165.610] SetEndOfFile (hFile=0x1e8) returned 1 [0165.616] SetEndOfFile (hFile=0x1e8) returned 1 [0165.622] SetEndOfFile (hFile=0x1e8) returned 1 [0165.630] SetEndOfFile (hFile=0x1e8) returned 1 [0165.637] SetEndOfFile (hFile=0x1e8) returned 1 [0165.643] SetEndOfFile (hFile=0x1e8) returned 1 [0165.653] SetEndOfFile (hFile=0x1e8) returned 1 [0165.662] SetEndOfFile (hFile=0x1e8) returned 1 [0165.666] SetEndOfFile (hFile=0x1e8) returned 1 [0165.673] SetEndOfFile (hFile=0x1e8) returned 1 [0165.680] SetEndOfFile (hFile=0x1e8) returned 1 [0165.684] SetEndOfFile (hFile=0x1e8) returned 1 [0165.689] SetEndOfFile (hFile=0x1e8) returned 1 [0165.696] SetEndOfFile (hFile=0x1e8) returned 1 [0165.702] SetEndOfFile (hFile=0x1e8) returned 1 [0165.708] SetEndOfFile (hFile=0x1e8) returned 1 [0165.715] SetEndOfFile (hFile=0x1e8) returned 1 [0165.722] SetEndOfFile (hFile=0x1e8) returned 1 [0165.728] SetEndOfFile (hFile=0x1e8) returned 1 [0165.735] SetEndOfFile (hFile=0x1e8) returned 1 [0165.740] SetEndOfFile (hFile=0x1e8) returned 1 [0165.748] SetEndOfFile (hFile=0x1e8) returned 1 [0165.756] SetEndOfFile (hFile=0x1e8) returned 1 [0165.761] SetEndOfFile (hFile=0x1e8) returned 1 [0165.770] SetEndOfFile (hFile=0x1e8) returned 1 [0165.777] SetEndOfFile (hFile=0x1e8) returned 1 [0165.783] SetEndOfFile (hFile=0x1e8) returned 1 [0165.789] SetEndOfFile (hFile=0x1e8) returned 1 [0165.795] SetEndOfFile (hFile=0x1e8) returned 1 [0165.801] SetEndOfFile (hFile=0x1e8) returned 1 [0165.808] SetEndOfFile (hFile=0x1e8) returned 1 [0165.814] SetEndOfFile (hFile=0x1e8) returned 1 [0165.823] SetEndOfFile (hFile=0x1e8) returned 1 [0165.828] SetEndOfFile (hFile=0x1e8) returned 1 [0165.832] SetEndOfFile (hFile=0x1e8) returned 1 [0165.837] SetEndOfFile (hFile=0x1e8) returned 1 [0165.841] SetEndOfFile (hFile=0x1e8) returned 1 [0165.846] SetEndOfFile (hFile=0x1e8) returned 1 [0165.850] SetEndOfFile (hFile=0x1e8) returned 1 [0165.855] SetEndOfFile (hFile=0x1e8) returned 1 [0165.860] SetEndOfFile (hFile=0x1e8) returned 1 [0165.865] SetEndOfFile (hFile=0x1e8) returned 1 [0165.871] SetEndOfFile (hFile=0x1e8) returned 1 [0165.876] SetEndOfFile (hFile=0x1e8) returned 1 [0165.881] SetEndOfFile (hFile=0x1e8) returned 1 [0165.888] SetEndOfFile (hFile=0x1e8) returned 1 [0165.894] SetEndOfFile (hFile=0x1e8) returned 1 [0165.901] SetEndOfFile (hFile=0x1e8) returned 1 [0165.906] SetEndOfFile (hFile=0x1e8) returned 1 [0166.023] SetEndOfFile (hFile=0x1e8) returned 1 [0166.031] SetEndOfFile (hFile=0x1e8) returned 1 [0166.036] SetEndOfFile (hFile=0x1e8) returned 1 [0166.042] SetEndOfFile (hFile=0x1e8) returned 1 [0166.046] SetEndOfFile (hFile=0x1e8) returned 1 [0166.051] SetEndOfFile (hFile=0x1e8) returned 1 [0166.058] SetEndOfFile (hFile=0x1e8) returned 1 [0166.063] SetEndOfFile (hFile=0x1e8) returned 1 [0166.071] SetEndOfFile (hFile=0x1e8) returned 1 [0166.075] SetEndOfFile (hFile=0x1e8) returned 1 [0166.080] SetEndOfFile (hFile=0x1e8) returned 1 [0166.099] SetEndOfFile (hFile=0x1e8) returned 1 [0166.105] SetEndOfFile (hFile=0x1e8) returned 1 [0166.110] SetEndOfFile (hFile=0x1e8) returned 1 [0166.116] SetEndOfFile (hFile=0x1e8) returned 1 [0166.123] SetEndOfFile (hFile=0x1e8) returned 1 [0166.131] SetEndOfFile (hFile=0x1e8) returned 1 [0166.135] SetEndOfFile (hFile=0x1e8) returned 1 [0166.141] SetEndOfFile (hFile=0x1e8) returned 1 [0166.146] SetEndOfFile (hFile=0x1e8) returned 1 [0166.151] SetEndOfFile (hFile=0x1e8) returned 1 [0166.157] SetEndOfFile (hFile=0x1e8) returned 1 [0166.167] SetEndOfFile (hFile=0x1e8) returned 1 [0166.174] SetEndOfFile (hFile=0x1e8) returned 1 [0166.183] SetEndOfFile (hFile=0x1e8) returned 1 [0166.188] SetEndOfFile (hFile=0x1e8) returned 1 [0166.195] SetEndOfFile (hFile=0x1e8) returned 1 [0166.200] SetEndOfFile (hFile=0x1e8) returned 1 [0166.205] SetEndOfFile (hFile=0x1e8) returned 1 [0166.210] SetEndOfFile (hFile=0x1e8) returned 1 [0166.214] SetEndOfFile (hFile=0x1e8) returned 1 [0166.219] SetEndOfFile (hFile=0x1e8) returned 1 [0166.225] SetEndOfFile (hFile=0x1e8) returned 1 [0166.230] SetEndOfFile (hFile=0x1e8) returned 1 [0166.235] SetEndOfFile (hFile=0x1e8) returned 1 [0166.240] SetEndOfFile (hFile=0x1e8) returned 1 [0166.245] SetEndOfFile (hFile=0x1e8) returned 1 [0166.250] SetEndOfFile (hFile=0x1e8) returned 1 [0166.255] SetEndOfFile (hFile=0x1e8) returned 1 [0166.259] SetEndOfFile (hFile=0x1e8) returned 1 [0166.270] SetEndOfFile (hFile=0x1e8) returned 1 [0166.276] SetEndOfFile (hFile=0x1e8) returned 1 [0166.281] SetEndOfFile (hFile=0x1e8) returned 1 [0166.288] SetEndOfFile (hFile=0x1e8) returned 1 [0166.293] SetEndOfFile (hFile=0x1e8) returned 1 [0166.299] SetEndOfFile (hFile=0x1e8) returned 1 [0166.306] SetEndOfFile (hFile=0x1e8) returned 1 [0166.314] SetEndOfFile (hFile=0x1e8) returned 1 [0166.342] SetEndOfFile (hFile=0x1e8) returned 1 [0166.349] SetEndOfFile (hFile=0x1e8) returned 1 [0166.356] SetEndOfFile (hFile=0x1e8) returned 1 [0166.362] SetEndOfFile (hFile=0x1e8) returned 1 [0166.372] SetEndOfFile (hFile=0x1e8) returned 1 [0166.377] SetEndOfFile (hFile=0x1e8) returned 1 [0166.386] SetEndOfFile (hFile=0x1e8) returned 1 [0166.392] SetEndOfFile (hFile=0x1e8) returned 1 [0166.399] SetEndOfFile (hFile=0x1e8) returned 1 [0166.406] SetEndOfFile (hFile=0x1e8) returned 1 [0166.412] SetEndOfFile (hFile=0x1e8) returned 1 [0166.419] SetEndOfFile (hFile=0x1e8) returned 1 [0166.440] SetEndOfFile (hFile=0x1e8) returned 1 [0166.446] SetEndOfFile (hFile=0x1e8) returned 1 [0166.454] SetEndOfFile (hFile=0x1e8) returned 1 [0166.461] SetEndOfFile (hFile=0x1e8) returned 1 [0166.467] SetEndOfFile (hFile=0x1e8) returned 1 [0166.474] SetEndOfFile (hFile=0x1e8) returned 1 [0166.481] SetEndOfFile (hFile=0x1e8) returned 1 [0166.488] SetEndOfFile (hFile=0x1e8) returned 1 [0166.495] SetEndOfFile (hFile=0x1e8) returned 1 [0166.502] SetEndOfFile (hFile=0x1e8) returned 1 [0166.524] SetEndOfFile (hFile=0x1e8) returned 1 [0166.530] SetEndOfFile (hFile=0x1e8) returned 1 [0166.538] SetEndOfFile (hFile=0x1e8) returned 1 [0166.548] SetEndOfFile (hFile=0x1e8) returned 1 [0166.555] SetEndOfFile (hFile=0x1e8) returned 1 [0166.560] SetEndOfFile (hFile=0x1e8) returned 1 [0166.567] SetEndOfFile (hFile=0x1e8) returned 1 [0166.573] SetEndOfFile (hFile=0x1e8) returned 1 [0166.587] SetEndOfFile (hFile=0x1e8) returned 1 [0166.592] SetEndOfFile (hFile=0x1e8) returned 1 [0166.597] SetEndOfFile (hFile=0x1e8) returned 1 [0166.602] SetEndOfFile (hFile=0x1e8) returned 1 [0166.608] SetEndOfFile (hFile=0x1e8) returned 1 [0166.613] SetEndOfFile (hFile=0x1e8) returned 1 [0166.620] SetEndOfFile (hFile=0x1e8) returned 1 [0166.628] SetEndOfFile (hFile=0x1e8) returned 1 [0166.635] SetEndOfFile (hFile=0x1e8) returned 1 [0166.642] SetEndOfFile (hFile=0x1e8) returned 1 [0166.651] SetEndOfFile (hFile=0x1e8) returned 1 [0166.657] SetEndOfFile (hFile=0x1e8) returned 1 [0166.665] SetEndOfFile (hFile=0x1e8) returned 1 [0166.672] SetEndOfFile (hFile=0x1e8) returned 1 [0166.697] SetEndOfFile (hFile=0x1e8) returned 1 [0166.704] SetEndOfFile (hFile=0x1e8) returned 1 [0166.711] SetEndOfFile (hFile=0x1e8) returned 1 [0166.715] SetEndOfFile (hFile=0x1e8) returned 1 [0166.719] SetEndOfFile (hFile=0x1e8) returned 1 [0166.724] SetEndOfFile (hFile=0x1e8) returned 1 [0166.729] SetEndOfFile (hFile=0x1e8) returned 1 [0166.737] SetEndOfFile (hFile=0x1e8) returned 1 [0166.742] SetEndOfFile (hFile=0x1e8) returned 1 [0166.746] SetEndOfFile (hFile=0x1e8) returned 1 [0166.751] SetEndOfFile (hFile=0x1e8) returned 1 [0166.759] SetEndOfFile (hFile=0x1e8) returned 1 [0166.764] SetEndOfFile (hFile=0x1e8) returned 1 [0166.771] SetEndOfFile (hFile=0x1e8) returned 1 [0166.779] SetEndOfFile (hFile=0x1e8) returned 1 [0166.785] SetEndOfFile (hFile=0x1e8) returned 1 [0166.793] SetEndOfFile (hFile=0x1e8) returned 1 [0166.799] SetEndOfFile (hFile=0x1e8) returned 1 [0166.806] SetEndOfFile (hFile=0x1e8) returned 1 [0166.811] SetEndOfFile (hFile=0x1e8) returned 1 [0166.816] SetEndOfFile (hFile=0x1e8) returned 1 [0166.822] SetEndOfFile (hFile=0x1e8) returned 1 [0166.827] SetEndOfFile (hFile=0x1e8) returned 1 [0166.832] SetEndOfFile (hFile=0x1e8) returned 1 [0166.837] SetEndOfFile (hFile=0x1e8) returned 1 [0166.842] SetEndOfFile (hFile=0x1e8) returned 1 [0166.847] SetEndOfFile (hFile=0x1e8) returned 1 [0166.856] SetEndOfFile (hFile=0x1e8) returned 1 [0166.864] SetEndOfFile (hFile=0x1e8) returned 1 [0166.869] SetEndOfFile (hFile=0x1e8) returned 1 [0166.874] SetEndOfFile (hFile=0x1e8) returned 1 [0166.880] SetEndOfFile (hFile=0x1e8) returned 1 [0166.886] SetEndOfFile (hFile=0x1e8) returned 1 [0166.894] SetEndOfFile (hFile=0x1e8) returned 1 [0166.900] SetEndOfFile (hFile=0x1e8) returned 1 [0166.905] SetEndOfFile (hFile=0x1e8) returned 1 [0166.911] SetEndOfFile (hFile=0x178) returned 1 [0166.921] SetEndOfFile (hFile=0x178) returned 1 [0166.926] SetEndOfFile (hFile=0x178) returned 1 [0166.932] SetEndOfFile (hFile=0x178) returned 1 [0166.938] SetEndOfFile (hFile=0x178) returned 1 [0166.943] SetEndOfFile (hFile=0x178) returned 1 [0166.947] SetEndOfFile (hFile=0x178) returned 1 [0166.953] SetEndOfFile (hFile=0x178) returned 1 [0166.958] SetEndOfFile (hFile=0x178) returned 1 [0166.963] SetEndOfFile (hFile=0x178) returned 1 [0166.972] SetEndOfFile (hFile=0x178) returned 1 [0166.977] SetEndOfFile (hFile=0x178) returned 1 [0166.982] SetEndOfFile (hFile=0x178) returned 1 [0166.987] SetEndOfFile (hFile=0x178) returned 1 [0166.993] SetEndOfFile (hFile=0x178) returned 1 [0167.000] SetEndOfFile (hFile=0x178) returned 1 [0167.009] SetEndOfFile (hFile=0x178) returned 1 [0167.017] SetEndOfFile (hFile=0x178) returned 1 [0167.022] SetEndOfFile (hFile=0x178) returned 1 [0167.027] SetEndOfFile (hFile=0x178) returned 1 [0167.032] SetEndOfFile (hFile=0x178) returned 1 [0167.037] SetEndOfFile (hFile=0x178) returned 1 [0167.042] SetEndOfFile (hFile=0x178) returned 1 [0167.052] SetEndOfFile (hFile=0x178) returned 1 [0167.058] SetEndOfFile (hFile=0x178) returned 1 [0167.063] SetEndOfFile (hFile=0x178) returned 1 [0167.071] SetEndOfFile (hFile=0x178) returned 1 [0167.076] SetEndOfFile (hFile=0x178) returned 1 [0167.097] SetEndOfFile (hFile=0x178) returned 1 [0167.102] SetEndOfFile (hFile=0x178) returned 1 [0167.108] SetEndOfFile (hFile=0x178) returned 1 [0167.114] SetEndOfFile (hFile=0x178) returned 1 [0167.119] SetEndOfFile (hFile=0x178) returned 1 [0167.124] SetEndOfFile (hFile=0x178) returned 1 [0167.129] SetEndOfFile (hFile=0x178) returned 1 [0167.134] SetEndOfFile (hFile=0x178) returned 1 [0167.138] SetEndOfFile (hFile=0x178) returned 1 [0167.155] SetEndOfFile (hFile=0x178) returned 1 [0167.178] SetEndOfFile (hFile=0x178) returned 1 [0167.183] SetEndOfFile (hFile=0x178) returned 1 [0167.188] SetEndOfFile (hFile=0x178) returned 1 [0167.194] SetEndOfFile (hFile=0x178) returned 1 [0167.202] SetEndOfFile (hFile=0x178) returned 1 [0167.210] SetEndOfFile (hFile=0x178) returned 1 [0167.216] SetEndOfFile (hFile=0x178) returned 1 [0167.230] SetEndOfFile (hFile=0x178) returned 1 [0167.239] SetEndOfFile (hFile=0x178) returned 1 [0167.249] SetEndOfFile (hFile=0x178) returned 1 [0167.257] SetEndOfFile (hFile=0x178) returned 1 [0167.265] SetEndOfFile (hFile=0x178) returned 1 [0167.271] SetEndOfFile (hFile=0x178) returned 1 [0167.325] SetEndOfFile (hFile=0x178) returned 1 [0167.331] SetEndOfFile (hFile=0x178) returned 1 [0167.336] SetEndOfFile (hFile=0x178) returned 1 [0167.341] SetEndOfFile (hFile=0x178) returned 1 [0167.347] SetEndOfFile (hFile=0x178) returned 1 [0167.352] SetEndOfFile (hFile=0x178) returned 1 [0167.357] SetEndOfFile (hFile=0x178) returned 1 [0167.363] SetEndOfFile (hFile=0x178) returned 1 [0167.368] SetEndOfFile (hFile=0x178) returned 1 [0167.375] SetEndOfFile (hFile=0x178) returned 1 [0167.383] SetEndOfFile (hFile=0x178) returned 1 [0167.390] SetEndOfFile (hFile=0x178) returned 1 [0167.397] SetEndOfFile (hFile=0x178) returned 1 [0167.404] SetEndOfFile (hFile=0x178) returned 1 [0167.411] SetEndOfFile (hFile=0x178) returned 1 [0167.419] SetEndOfFile (hFile=0x178) returned 1 [0167.426] SetEndOfFile (hFile=0x178) returned 1 [0167.435] SetEndOfFile (hFile=0x178) returned 1 [0167.442] SetEndOfFile (hFile=0x178) returned 1 [0167.448] SetEndOfFile (hFile=0x178) returned 1 [0167.456] SetEndOfFile (hFile=0x178) returned 1 [0167.468] SetEndOfFile (hFile=0x178) returned 1 [0167.475] SetEndOfFile (hFile=0x178) returned 1 [0167.483] SetEndOfFile (hFile=0x178) returned 1 [0167.489] SetEndOfFile (hFile=0x178) returned 1 [0167.499] SetEndOfFile (hFile=0x178) returned 1 [0167.506] SetEndOfFile (hFile=0x178) returned 1 [0167.513] SetEndOfFile (hFile=0x178) returned 1 [0167.530] SetEndOfFile (hFile=0x178) returned 1 [0167.536] SetEndOfFile (hFile=0x178) returned 1 [0167.542] SetEndOfFile (hFile=0x178) returned 1 [0167.549] SetEndOfFile (hFile=0x178) returned 1 [0167.555] SetEndOfFile (hFile=0x178) returned 1 [0167.563] SetEndOfFile (hFile=0x178) returned 1 [0167.585] SetEndOfFile (hFile=0x178) returned 1 [0167.594] SetEndOfFile (hFile=0x178) returned 1 [0167.601] SetEndOfFile (hFile=0x178) returned 1 [0167.608] SetEndOfFile (hFile=0x178) returned 1 [0167.617] SetEndOfFile (hFile=0x178) returned 1 [0167.626] SetEndOfFile (hFile=0x178) returned 1 [0167.633] SetEndOfFile (hFile=0x178) returned 1 [0167.639] SetEndOfFile (hFile=0x178) returned 1 [0167.646] SetEndOfFile (hFile=0x178) returned 1 [0167.653] SetEndOfFile (hFile=0x178) returned 1 [0167.659] SetEndOfFile (hFile=0x178) returned 1 [0167.667] SetEndOfFile (hFile=0x178) returned 1 [0167.678] SetEndOfFile (hFile=0x178) returned 1 [0167.684] SetEndOfFile (hFile=0x178) returned 1 [0167.692] SetEndOfFile (hFile=0x178) returned 1 [0167.698] SetEndOfFile (hFile=0x178) returned 1 [0167.704] SetEndOfFile (hFile=0x178) returned 1 [0167.714] SetEndOfFile (hFile=0x178) returned 1 [0167.719] SetEndOfFile (hFile=0x178) returned 1 [0167.726] SetEndOfFile (hFile=0x178) returned 1 [0167.733] SetEndOfFile (hFile=0x178) returned 1 [0167.742] SetEndOfFile (hFile=0x178) returned 1 [0167.748] SetEndOfFile (hFile=0x178) returned 1 [0167.755] SetEndOfFile (hFile=0x178) returned 1 [0167.761] SetEndOfFile (hFile=0x178) returned 1 [0167.767] SetEndOfFile (hFile=0x178) returned 1 [0167.773] SetEndOfFile (hFile=0x178) returned 1 [0167.778] SetEndOfFile (hFile=0x178) returned 1 [0167.783] SetEndOfFile (hFile=0x178) returned 1 [0167.788] SetEndOfFile (hFile=0x178) returned 1 [0167.793] SetEndOfFile (hFile=0x178) returned 1 [0167.799] SetEndOfFile (hFile=0x178) returned 1 [0167.806] SetEndOfFile (hFile=0x178) returned 1 [0167.811] SetEndOfFile (hFile=0x178) returned 1 [0167.817] SetEndOfFile (hFile=0x178) returned 1 [0167.822] SetEndOfFile (hFile=0x178) returned 1 [0167.827] SetEndOfFile (hFile=0x178) returned 1 [0167.833] SetEndOfFile (hFile=0x178) returned 1 [0167.841] SetEndOfFile (hFile=0x178) returned 1 [0167.846] SetEndOfFile (hFile=0x178) returned 1 [0167.851] SetEndOfFile (hFile=0x178) returned 1 [0167.855] SetEndOfFile (hFile=0x178) returned 1 [0167.861] SetEndOfFile (hFile=0x178) returned 1 [0167.869] SetEndOfFile (hFile=0x178) returned 1 [0167.875] SetEndOfFile (hFile=0x178) returned 1 [0167.905] SetEndOfFile (hFile=0x178) returned 1 [0167.910] SetEndOfFile (hFile=0x178) returned 1 [0167.916] SetEndOfFile (hFile=0x178) returned 1 [0167.921] SetEndOfFile (hFile=0x178) returned 1 [0167.926] SetEndOfFile (hFile=0x178) returned 1 [0167.934] SetEndOfFile (hFile=0x178) returned 1 [0167.939] SetEndOfFile (hFile=0x178) returned 1 [0167.944] SetEndOfFile (hFile=0x178) returned 1 [0167.950] SetEndOfFile (hFile=0x178) returned 1 [0167.955] SetEndOfFile (hFile=0x178) returned 1 [0167.960] SetEndOfFile (hFile=0x178) returned 1 [0167.965] SetEndOfFile (hFile=0x178) returned 1 [0167.971] SetEndOfFile (hFile=0x178) returned 1 [0167.975] SetEndOfFile (hFile=0x178) returned 1 [0167.981] SetEndOfFile (hFile=0x178) returned 1 [0167.988] SetEndOfFile (hFile=0x178) returned 1 [0167.993] SetEndOfFile (hFile=0x178) returned 1 [0167.997] SetEndOfFile (hFile=0x178) returned 1 [0168.001] SetEndOfFile (hFile=0x178) returned 1 [0168.008] SetEndOfFile (hFile=0x178) returned 1 [0168.013] SetEndOfFile (hFile=0x178) returned 1 [0168.018] SetEndOfFile (hFile=0x178) returned 1 [0168.023] SetEndOfFile (hFile=0x178) returned 1 [0168.029] SetEndOfFile (hFile=0x178) returned 1 [0168.043] SetEndOfFile (hFile=0x178) returned 1 [0168.051] SetEndOfFile (hFile=0x178) returned 1 [0168.057] SetEndOfFile (hFile=0x178) returned 1 [0168.064] SetEndOfFile (hFile=0x178) returned 1 [0168.069] SetEndOfFile (hFile=0x178) returned 1 [0168.074] SetEndOfFile (hFile=0x178) returned 1 [0168.093] SetEndOfFile (hFile=0x178) returned 1 [0168.098] SetEndOfFile (hFile=0x178) returned 1 [0168.104] SetEndOfFile (hFile=0x178) returned 1 [0168.113] SetEndOfFile (hFile=0x178) returned 1 [0168.120] SetEndOfFile (hFile=0x178) returned 1 [0168.127] SetEndOfFile (hFile=0x178) returned 1 [0168.134] SetEndOfFile (hFile=0x178) returned 1 [0168.139] SetEndOfFile (hFile=0x178) returned 1 [0168.143] SetEndOfFile (hFile=0x178) returned 1 [0168.148] SetEndOfFile (hFile=0x178) returned 1 [0168.152] SetEndOfFile (hFile=0x178) returned 1 [0168.156] SetEndOfFile (hFile=0x178) returned 1 [0168.161] SetEndOfFile (hFile=0x178) returned 1 [0168.166] SetEndOfFile (hFile=0x178) returned 1 [0168.171] SetEndOfFile (hFile=0x178) returned 1 [0168.180] SetEndOfFile (hFile=0x178) returned 1 [0168.185] SetEndOfFile (hFile=0x178) returned 1 [0168.190] SetEndOfFile (hFile=0x178) returned 1 [0168.195] SetEndOfFile (hFile=0x178) returned 1 [0168.207] SetEndOfFile (hFile=0x178) returned 1 [0168.212] SetEndOfFile (hFile=0x178) returned 1 [0168.217] SetEndOfFile (hFile=0x178) returned 1 [0168.223] SetEndOfFile (hFile=0x178) returned 1 [0168.228] SetEndOfFile (hFile=0x178) returned 1 [0168.233] SetEndOfFile (hFile=0x178) returned 1 [0168.238] SetEndOfFile (hFile=0x178) returned 1 [0168.244] SetEndOfFile (hFile=0x178) returned 1 [0168.248] SetEndOfFile (hFile=0x178) returned 1 [0168.253] SetEndOfFile (hFile=0x178) returned 1 [0168.258] SetEndOfFile (hFile=0x178) returned 1 [0168.263] SetEndOfFile (hFile=0x178) returned 1 [0168.268] SetEndOfFile (hFile=0x178) returned 1 [0168.272] SetEndOfFile (hFile=0x178) returned 1 [0168.278] SetEndOfFile (hFile=0x178) returned 1 [0168.282] SetEndOfFile (hFile=0x178) returned 1 [0168.288] SetEndOfFile (hFile=0x178) returned 1 [0168.293] SetEndOfFile (hFile=0x178) returned 1 [0168.299] SetEndOfFile (hFile=0x178) returned 1 [0168.304] SetEndOfFile (hFile=0x178) returned 1 [0168.316] SetEndOfFile (hFile=0x178) returned 1 [0168.320] SetEndOfFile (hFile=0x178) returned 1 [0168.327] SetEndOfFile (hFile=0x178) returned 1 [0168.332] SetEndOfFile (hFile=0x178) returned 1 [0168.337] SetEndOfFile (hFile=0x178) returned 1 [0168.345] SetEndOfFile (hFile=0x178) returned 1 [0168.350] SetEndOfFile (hFile=0x178) returned 1 [0168.355] SetEndOfFile (hFile=0x178) returned 1 [0168.360] SetEndOfFile (hFile=0x178) returned 1 [0168.365] SetEndOfFile (hFile=0x178) returned 1 [0168.370] SetEndOfFile (hFile=0x178) returned 1 [0168.375] SetEndOfFile (hFile=0x178) returned 1 [0168.381] SetEndOfFile (hFile=0x178) returned 1 [0168.386] SetEndOfFile (hFile=0x178) returned 1 [0168.390] SetEndOfFile (hFile=0x178) returned 1 [0168.394] SetEndOfFile (hFile=0x178) returned 1 [0168.399] SetEndOfFile (hFile=0x178) returned 1 [0168.404] SetEndOfFile (hFile=0x178) returned 1 [0168.410] SetEndOfFile (hFile=0x178) returned 1 [0168.417] SetEndOfFile (hFile=0x178) returned 1 [0168.424] SetEndOfFile (hFile=0x178) returned 1 [0168.431] SetEndOfFile (hFile=0x178) returned 1 [0168.436] SetEndOfFile (hFile=0x178) returned 1 [0168.440] SetEndOfFile (hFile=0x178) returned 1 [0168.448] SetEndOfFile (hFile=0x178) returned 1 [0168.456] SetEndOfFile (hFile=0x178) returned 1 [0168.461] SetEndOfFile (hFile=0x178) returned 1 [0168.466] SetEndOfFile (hFile=0x178) returned 1 [0168.472] SetEndOfFile (hFile=0x178) returned 1 [0168.477] SetEndOfFile (hFile=0x178) returned 1 [0168.482] SetEndOfFile (hFile=0x178) returned 1 [0168.490] SetEndOfFile (hFile=0x178) returned 1 [0168.496] SetEndOfFile (hFile=0x178) returned 1 [0168.508] SetEndOfFile (hFile=0x178) returned 1 [0168.513] SetEndOfFile (hFile=0x178) returned 1 [0168.518] SetEndOfFile (hFile=0x178) returned 1 [0168.522] SetEndOfFile (hFile=0x178) returned 1 [0168.526] SetEndOfFile (hFile=0x178) returned 1 [0168.531] SetEndOfFile (hFile=0x178) returned 1 [0168.536] SetEndOfFile (hFile=0x178) returned 1 [0168.553] SetEndOfFile (hFile=0x178) returned 1 [0168.558] SetEndOfFile (hFile=0x178) returned 1 [0168.563] SetEndOfFile (hFile=0x178) returned 1 [0168.568] SetEndOfFile (hFile=0x178) returned 1 [0168.573] SetEndOfFile (hFile=0x178) returned 1 [0168.578] SetEndOfFile (hFile=0x178) returned 1 [0168.584] SetEndOfFile (hFile=0x178) returned 1 [0168.589] SetEndOfFile (hFile=0x178) returned 1 [0168.594] SetEndOfFile (hFile=0x178) returned 1 [0168.600] SetEndOfFile (hFile=0x178) returned 1 [0168.608] SetEndOfFile (hFile=0x178) returned 1 [0168.620] SetEndOfFile (hFile=0x178) returned 1 [0168.626] SetEndOfFile (hFile=0x178) returned 1 [0168.633] SetEndOfFile (hFile=0x178) returned 1 [0168.639] SetEndOfFile (hFile=0x178) returned 1 [0168.645] SetEndOfFile (hFile=0x178) returned 1 [0168.652] SetEndOfFile (hFile=0x178) returned 1 [0168.662] SetEndOfFile (hFile=0x178) returned 1 [0168.668] SetEndOfFile (hFile=0x178) returned 1 [0168.675] SetEndOfFile (hFile=0x178) returned 1 [0168.680] SetEndOfFile (hFile=0x178) returned 1 [0168.685] SetEndOfFile (hFile=0x178) returned 1 [0168.691] SetEndOfFile (hFile=0x178) returned 1 [0168.697] SetEndOfFile (hFile=0x178) returned 1 [0168.703] SetEndOfFile (hFile=0x178) returned 1 [0168.708] SetEndOfFile (hFile=0x178) returned 1 [0168.714] SetEndOfFile (hFile=0x178) returned 1 [0168.720] SetEndOfFile (hFile=0x178) returned 1 [0168.726] SetEndOfFile (hFile=0x178) returned 1 [0168.736] SetEndOfFile (hFile=0x178) returned 1 [0168.742] SetEndOfFile (hFile=0x178) returned 1 [0168.748] SetEndOfFile (hFile=0x178) returned 1 [0168.755] SetEndOfFile (hFile=0x178) returned 1 [0168.761] SetEndOfFile (hFile=0x178) returned 1 [0168.766] SetEndOfFile (hFile=0x178) returned 1 [0168.773] SetEndOfFile (hFile=0x178) returned 1 [0168.779] SetEndOfFile (hFile=0x178) returned 1 [0168.786] SetEndOfFile (hFile=0x178) returned 1 [0168.796] SetEndOfFile (hFile=0x178) returned 1 [0168.802] SetEndOfFile (hFile=0x178) returned 1 [0168.810] SetEndOfFile (hFile=0x178) returned 1 [0168.817] SetEndOfFile (hFile=0x178) returned 1 [0168.823] SetEndOfFile (hFile=0x178) returned 1 [0168.836] SetEndOfFile (hFile=0x178) returned 1 [0168.844] SetEndOfFile (hFile=0x178) returned 1 [0168.854] SetEndOfFile (hFile=0x178) returned 1 [0168.863] SetEndOfFile (hFile=0x178) returned 1 [0168.871] SetEndOfFile (hFile=0x178) returned 1 [0168.881] SetEndOfFile (hFile=0x178) returned 1 [0168.890] SetEndOfFile (hFile=0x178) returned 1 [0168.896] SetEndOfFile (hFile=0x178) returned 1 [0168.907] SetEndOfFile (hFile=0x178) returned 1 [0168.915] SetEndOfFile (hFile=0x178) returned 1 [0168.922] SetEndOfFile (hFile=0x178) returned 1 [0168.930] SetEndOfFile (hFile=0x178) returned 1 [0168.937] SetEndOfFile (hFile=0x178) returned 1 [0168.944] SetEndOfFile (hFile=0x178) returned 1 [0168.961] SetEndOfFile (hFile=0x178) returned 1 [0168.968] SetEndOfFile (hFile=0x178) returned 1 [0168.979] SetEndOfFile (hFile=0x178) returned 1 [0169.005] SetEndOfFile (hFile=0x178) returned 1 [0169.012] SetEndOfFile (hFile=0x178) returned 1 [0169.019] SetEndOfFile (hFile=0x178) returned 1 [0169.024] SetEndOfFile (hFile=0x178) returned 1 [0169.037] SetEndOfFile (hFile=0x178) returned 1 [0169.044] SetEndOfFile (hFile=0x178) returned 1 [0169.050] SetEndOfFile (hFile=0x178) returned 1 [0169.057] SetEndOfFile (hFile=0x178) returned 1 [0169.064] SetEndOfFile (hFile=0x178) returned 1 [0169.073] SetEndOfFile (hFile=0x178) returned 1 [0169.106] SetEndOfFile (hFile=0x178) returned 1 [0169.113] SetEndOfFile (hFile=0x178) returned 1 [0169.119] SetEndOfFile (hFile=0x178) returned 1 [0169.128] SetEndOfFile (hFile=0x178) returned 1 [0169.134] SetEndOfFile (hFile=0x178) returned 1 [0169.141] SetEndOfFile (hFile=0x178) returned 1 [0169.147] SetEndOfFile (hFile=0x178) returned 1 [0169.155] SetEndOfFile (hFile=0x178) returned 1 [0169.161] SetEndOfFile (hFile=0x178) returned 1 [0169.167] SetEndOfFile (hFile=0x178) returned 1 [0169.174] SetEndOfFile (hFile=0x178) returned 1 [0169.181] SetEndOfFile (hFile=0x178) returned 1 [0169.187] SetEndOfFile (hFile=0x178) returned 1 [0169.194] SetEndOfFile (hFile=0x178) returned 1 [0169.201] SetEndOfFile (hFile=0x178) returned 1 [0169.208] SetEndOfFile (hFile=0x178) returned 1 [0169.213] SetEndOfFile (hFile=0x178) returned 1 [0169.219] SetEndOfFile (hFile=0x178) returned 1 [0169.225] SetEndOfFile (hFile=0x178) returned 1 [0169.231] SetEndOfFile (hFile=0x178) returned 1 [0169.243] SetEndOfFile (hFile=0x178) returned 1 [0169.250] SetEndOfFile (hFile=0x178) returned 1 [0169.256] SetEndOfFile (hFile=0x178) returned 1 [0169.263] SetEndOfFile (hFile=0x178) returned 1 [0169.273] SetEndOfFile (hFile=0x178) returned 1 [0169.280] SetEndOfFile (hFile=0x178) returned 1 [0169.289] SetEndOfFile (hFile=0x178) returned 1 [0169.296] SetEndOfFile (hFile=0x178) returned 1 [0169.302] SetEndOfFile (hFile=0x178) returned 1 [0169.310] SetEndOfFile (hFile=0x178) returned 1 [0169.318] SetEndOfFile (hFile=0x178) returned 1 [0169.325] SetEndOfFile (hFile=0x178) returned 1 [0169.349] SetEndOfFile (hFile=0x178) returned 1 [0169.357] SetEndOfFile (hFile=0x178) returned 1 [0169.363] SetEndOfFile (hFile=0x178) returned 1 [0169.371] SetEndOfFile (hFile=0x178) returned 1 [0169.378] SetEndOfFile (hFile=0x178) returned 1 [0169.384] SetEndOfFile (hFile=0x178) returned 1 [0169.390] SetEndOfFile (hFile=0x178) returned 1 [0169.395] SetEndOfFile (hFile=0x178) returned 1 [0169.402] SetEndOfFile (hFile=0x178) returned 1 [0169.408] SetEndOfFile (hFile=0x178) returned 1 [0169.415] SetEndOfFile (hFile=0x178) returned 1 [0169.423] SetEndOfFile (hFile=0x178) returned 1 [0169.429] SetEndOfFile (hFile=0x178) returned 1 [0169.438] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fc684, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", lpFilePart=0x0) returned 0x78 [0169.439] WriteFile (in: hFile=0x25c, lpBuffer=0x28a0ab0*, nNumberOfBytesToWrite=0x33e, lpNumberOfBytesWritten=0x2fcc0c, lpOverlapped=0x0 | out: lpBuffer=0x28a0ab0*, lpNumberOfBytesWritten=0x2fcc0c*=0x33e, lpOverlapped=0x0) returned 1 [0169.449] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\*", lpFindFileData=0x2fc68c | out: lpFindFileData=0x2fc68c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347857c0, ftCreationTime.dwHighDateTime=0x1d75bb1, ftLastAccessTime.dwLowDateTime=0x9bce67b0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9bce67b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3caa80 [0169.449] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\*", lpFindFileData=0x2fc68c | out: lpFindFileData=0x2fc68c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347857c0, ftCreationTime.dwHighDateTime=0x1d75bb1, ftLastAccessTime.dwLowDateTime=0x9bce67b0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9bce67b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3caa80 [0169.452] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0169.452] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt.Poteston", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt.Poteston", lpFilePart=0x0) returned 0x82 [0169.453] SetEndOfFile (hFile=0x178) returned 1 [0169.455] WriteFile (in: hFile=0x178, lpBuffer=0x28afb04*, nNumberOfBytesToWrite=0x340, lpNumberOfBytesWritten=0x2fc234, lpOverlapped=0x0 | out: lpBuffer=0x28afb04*, lpNumberOfBytesWritten=0x2fc234*=0x340, lpOverlapped=0x0) returned 1 [0169.458] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0169.459] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0169.460] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0169.461] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0169.462] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0169.462] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0169.464] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fc684, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0169.465] WriteFile (in: hFile=0x25c, lpBuffer=0x28bd4fc*, nNumberOfBytesToWrite=0x33e, lpNumberOfBytesWritten=0x2fcc0c, lpOverlapped=0x0 | out: lpBuffer=0x28bd4fc*, lpNumberOfBytesWritten=0x2fcc0c*=0x33e, lpOverlapped=0x0) returned 1 [0169.468] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\*", lpFindFileData=0x2fc68c | out: lpFindFileData=0x2fc68c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdca4ffc0, ftCreationTime.dwHighDateTime=0x1d751cf, ftLastAccessTime.dwLowDateTime=0x9bce67b0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9bce67b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3caa80 [0169.468] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\*", lpFindFileData=0x2fc68c | out: lpFindFileData=0x2fc68c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdca4ffc0, ftCreationTime.dwHighDateTime=0x1d751cf, ftLastAccessTime.dwLowDateTime=0x9bce67b0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9bce67b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3caa80 [0169.469] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", lpFilePart=0x0) returned 0x70 [0169.469] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt.Poteston", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt.Poteston", lpFilePart=0x0) returned 0x79 [0169.470] SetEndOfFile (hFile=0x178) returned 1 [0169.471] WriteFile (in: hFile=0x178, lpBuffer=0x28c3b74*, nNumberOfBytesToWrite=0x340, lpNumberOfBytesWritten=0x2fc234, lpOverlapped=0x0 | out: lpBuffer=0x28c3b74*, lpNumberOfBytesWritten=0x2fc234*=0x340, lpOverlapped=0x0) returned 1 [0169.474] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", lpFilePart=0x0) returned 0x70 [0169.475] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", lpFilePart=0x0) returned 0x70 [0169.476] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fc684, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", lpFilePart=0x0) returned 0x70 [0169.477] WriteFile (in: hFile=0x25c, lpBuffer=0x28cac8c*, nNumberOfBytesToWrite=0x33e, lpNumberOfBytesWritten=0x2fcc0c, lpOverlapped=0x0 | out: lpBuffer=0x28cac8c*, lpNumberOfBytesWritten=0x2fcc0c*=0x33e, lpOverlapped=0x0) returned 1 [0169.479] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\*", lpFindFileData=0x2fc68c | out: lpFindFileData=0x2fc68c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe45bb30, ftCreationTime.dwHighDateTime=0x1d75a0b, ftLastAccessTime.dwLowDateTime=0x9bd0c910, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9bd0c910, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3caa80 [0169.480] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\*", lpFindFileData=0x2fc68c | out: lpFindFileData=0x2fc68c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe45bb30, ftCreationTime.dwHighDateTime=0x1d75a0b, ftLastAccessTime.dwLowDateTime=0x9bd0c910, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9bd0c910, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3caa80 [0169.481] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", lpFilePart=0x0) returned 0x78 [0169.482] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt.Poteston", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt.Poteston", lpFilePart=0x0) returned 0x81 [0169.482] SetEndOfFile (hFile=0x178) returned 1 [0169.486] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", lpFilePart=0x0) returned 0x78 [0169.487] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", lpFilePart=0x0) returned 0x78 [0169.488] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", lpFilePart=0x0) returned 0x78 [0169.488] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", lpFilePart=0x0) returned 0x78 [0169.490] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fc684, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", lpFilePart=0x0) returned 0x78 [0169.491] WriteFile (in: hFile=0x25c, lpBuffer=0x28ddf94*, nNumberOfBytesToWrite=0x33e, lpNumberOfBytesWritten=0x2fcc0c, lpOverlapped=0x0 | out: lpBuffer=0x28ddf94*, lpNumberOfBytesWritten=0x2fcc0c*=0x33e, lpOverlapped=0x0) returned 1 [0169.493] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fcbc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\readme.txt", lpFilePart=0x0) returned 0x69 [0169.493] WriteFile (in: hFile=0x25c, lpBuffer=0x28e2654*, nNumberOfBytesToWrite=0x33e, lpNumberOfBytesWritten=0x2fd148, lpOverlapped=0x0 | out: lpBuffer=0x28e2654*, lpNumberOfBytesWritten=0x2fd148*=0x33e, lpOverlapped=0x0) returned 1 [0169.496] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\*", lpFindFileData=0x2fcbc8 | out: lpFindFileData=0x2fcbc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36628860, ftCreationTime.dwHighDateTime=0x1d7550a, ftLastAccessTime.dwLowDateTime=0x9bd7ed30, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9bd7ed30, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3caa80 [0169.497] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\*", lpFindFileData=0x2fcbc8 | out: lpFindFileData=0x2fcbc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36628860, ftCreationTime.dwHighDateTime=0x1d7550a, ftLastAccessTime.dwLowDateTime=0x9bd7ed30, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9bd7ed30, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3caa80 [0169.499] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\*", lpFindFileData=0x2fc68c | out: lpFindFileData=0x2fc68c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347857c0, ftCreationTime.dwHighDateTime=0x1d75bb1, ftLastAccessTime.dwLowDateTime=0x9bd32a70, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9bd32a70, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3caa80 [0169.499] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\*", lpFindFileData=0x2fc68c | out: lpFindFileData=0x2fc68c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347857c0, ftCreationTime.dwHighDateTime=0x1d75bb1, ftLastAccessTime.dwLowDateTime=0x9bd32a70, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9bd32a70, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3caa80 [0169.501] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0169.502] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt.Poteston", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt.Poteston", lpFilePart=0x0) returned 0x82 [0169.502] SetEndOfFile (hFile=0x178) returned 1 [0169.504] WriteFile (in: hFile=0x178, lpBuffer=0x28f5b84*, nNumberOfBytesToWrite=0x340, lpNumberOfBytesWritten=0x2fc234, lpOverlapped=0x0 | out: lpBuffer=0x28f5b84*, lpNumberOfBytesWritten=0x2fc234*=0x340, lpOverlapped=0x0) returned 1 [0169.507] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0169.507] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0169.508] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0169.509] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0169.510] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0169.510] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0169.512] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fc684, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0169.513] WriteFile (in: hFile=0x25c, lpBuffer=0x290357c*, nNumberOfBytesToWrite=0x33e, lpNumberOfBytesWritten=0x2fcc0c, lpOverlapped=0x0 | out: lpBuffer=0x290357c*, lpNumberOfBytesWritten=0x2fcc0c*=0x33e, lpOverlapped=0x0) returned 1 [0169.519] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\*", lpFindFileData=0x2fc68c | out: lpFindFileData=0x2fc68c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdca4ffc0, ftCreationTime.dwHighDateTime=0x1d751cf, ftLastAccessTime.dwLowDateTime=0x9bd58bd0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9bd58bd0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3caa80 [0169.519] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\*", lpFindFileData=0x2fc68c | out: lpFindFileData=0x2fc68c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdca4ffc0, ftCreationTime.dwHighDateTime=0x1d751cf, ftLastAccessTime.dwLowDateTime=0x9bd58bd0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9bd58bd0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3caa80 [0169.520] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", lpFilePart=0x0) returned 0x70 [0169.521] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt.Poteston", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt.Poteston", lpFilePart=0x0) returned 0x79 [0169.521] SetEndOfFile (hFile=0x178) returned 1 [0169.523] WriteFile (in: hFile=0x178, lpBuffer=0x2909bf4*, nNumberOfBytesToWrite=0x340, lpNumberOfBytesWritten=0x2fc234, lpOverlapped=0x0 | out: lpBuffer=0x2909bf4*, lpNumberOfBytesWritten=0x2fc234*=0x340, lpOverlapped=0x0) returned 1 [0169.525] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", lpFilePart=0x0) returned 0x70 [0169.526] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", lpFilePart=0x0) returned 0x70 [0169.527] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fc684, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", lpFilePart=0x0) returned 0x70 [0169.528] WriteFile (in: hFile=0x25c, lpBuffer=0x2910d0c*, nNumberOfBytesToWrite=0x33e, lpNumberOfBytesWritten=0x2fcc0c, lpOverlapped=0x0 | out: lpBuffer=0x2910d0c*, lpNumberOfBytesWritten=0x2fcc0c*=0x33e, lpOverlapped=0x0) returned 1 [0169.531] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\*", lpFindFileData=0x2fc68c | out: lpFindFileData=0x2fc68c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe45bb30, ftCreationTime.dwHighDateTime=0x1d75a0b, ftLastAccessTime.dwLowDateTime=0x9bd7ed30, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9bd7ed30, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3caa80 [0169.531] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\*", lpFindFileData=0x2fc68c | out: lpFindFileData=0x2fc68c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe45bb30, ftCreationTime.dwHighDateTime=0x1d75a0b, ftLastAccessTime.dwLowDateTime=0x9bd7ed30, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9bd7ed30, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3caa80 [0169.533] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", lpFilePart=0x0) returned 0x78 [0169.533] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt.Poteston", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt.Poteston", lpFilePart=0x0) returned 0x81 [0169.533] SetEndOfFile (hFile=0x178) returned 1 [0169.537] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", lpFilePart=0x0) returned 0x78 [0169.538] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", lpFilePart=0x0) returned 0x78 [0169.539] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", lpFilePart=0x0) returned 0x78 [0169.540] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", lpFilePart=0x0) returned 0x78 [0169.541] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fc684, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", lpFilePart=0x0) returned 0x78 [0169.542] WriteFile (in: hFile=0x25c, lpBuffer=0x2924014*, nNumberOfBytesToWrite=0x33e, lpNumberOfBytesWritten=0x2fcc0c, lpOverlapped=0x0 | out: lpBuffer=0x2924014*, lpNumberOfBytesWritten=0x2fcc0c*=0x33e, lpOverlapped=0x0) returned 1 [0169.552] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\*", lpFindFileData=0x2fc68c | out: lpFindFileData=0x2fc68c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347857c0, ftCreationTime.dwHighDateTime=0x1d75bb1, ftLastAccessTime.dwLowDateTime=0x9bda4e90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9bda4e90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3caa80 [0169.553] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\*", lpFindFileData=0x2fc68c | out: lpFindFileData=0x2fc68c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347857c0, ftCreationTime.dwHighDateTime=0x1d75bb1, ftLastAccessTime.dwLowDateTime=0x9bda4e90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9bda4e90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3caa80 [0169.555] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0169.555] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt.Poteston", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt.Poteston", lpFilePart=0x0) returned 0x82 [0169.556] SetEndOfFile (hFile=0x178) returned 1 [0169.571] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0169.572] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0169.573] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0169.574] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0169.574] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0169.575] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0169.577] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fc684, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0169.578] WriteFile (in: hFile=0x25c, lpBuffer=0x2940a60*, nNumberOfBytesToWrite=0x33e, lpNumberOfBytesWritten=0x2fcc0c, lpOverlapped=0x0 | out: lpBuffer=0x2940a60*, lpNumberOfBytesWritten=0x2fcc0c*=0x33e, lpOverlapped=0x0) returned 1 [0169.580] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\*", lpFindFileData=0x2fc68c | out: lpFindFileData=0x2fc68c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdca4ffc0, ftCreationTime.dwHighDateTime=0x1d751cf, ftLastAccessTime.dwLowDateTime=0x9bdcaff0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9bdcaff0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3caa80 [0169.581] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\*", lpFindFileData=0x2fc68c | out: lpFindFileData=0x2fc68c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdca4ffc0, ftCreationTime.dwHighDateTime=0x1d751cf, ftLastAccessTime.dwLowDateTime=0x9bdcaff0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9bdcaff0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3caa80 [0169.582] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", lpFilePart=0x0) returned 0x70 [0169.582] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt.Poteston", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt.Poteston", lpFilePart=0x0) returned 0x79 [0169.582] SetEndOfFile (hFile=0x178) returned 1 [0169.586] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", lpFilePart=0x0) returned 0x70 [0169.587] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", lpFilePart=0x0) returned 0x70 [0169.588] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fc684, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", lpFilePart=0x0) returned 0x70 [0169.589] WriteFile (in: hFile=0x25c, lpBuffer=0x294e1f0*, nNumberOfBytesToWrite=0x33e, lpNumberOfBytesWritten=0x2fcc0c, lpOverlapped=0x0 | out: lpBuffer=0x294e1f0*, lpNumberOfBytesWritten=0x2fcc0c*=0x33e, lpOverlapped=0x0) returned 1 [0169.592] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\*", lpFindFileData=0x2fc68c | out: lpFindFileData=0x2fc68c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe45bb30, ftCreationTime.dwHighDateTime=0x1d75a0b, ftLastAccessTime.dwLowDateTime=0x9bdf1150, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9bdf1150, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3caa80 [0169.593] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\*", lpFindFileData=0x2fc68c | out: lpFindFileData=0x2fc68c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe45bb30, ftCreationTime.dwHighDateTime=0x1d75a0b, ftLastAccessTime.dwLowDateTime=0x9bdf1150, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9bdf1150, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3caa80 [0169.594] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", lpFilePart=0x0) returned 0x78 [0169.594] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt.Poteston", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt.Poteston", lpFilePart=0x0) returned 0x81 [0169.595] SetEndOfFile (hFile=0x178) returned 1 [0169.602] SetEndOfFile (hFile=0x178) returned 1 [0169.609] SetEndOfFile (hFile=0x178) returned 1 [0169.615] SetEndOfFile (hFile=0x178) returned 1 [0169.623] SetEndOfFile (hFile=0x178) returned 1 [0169.630] SetEndOfFile (hFile=0x178) returned 1 [0169.636] SetEndOfFile (hFile=0x178) returned 1 [0169.648] SetEndOfFile (hFile=0x178) returned 1 [0169.654] SetEndOfFile (hFile=0x178) returned 1 [0169.662] SetEndOfFile (hFile=0x178) returned 1 [0169.668] SetEndOfFile (hFile=0x178) returned 1 [0169.675] SetEndOfFile (hFile=0x178) returned 1 [0169.682] SetEndOfFile (hFile=0x178) returned 1 [0169.689] SetEndOfFile (hFile=0x178) returned 1 [0169.696] SetEndOfFile (hFile=0x178) returned 1 [0169.703] SetEndOfFile (hFile=0x178) returned 1 [0169.709] SetEndOfFile (hFile=0x178) returned 1 [0169.719] WriteFile (in: hFile=0x25c, lpBuffer=0x28a3bf0*, nNumberOfBytesToWrite=0x33e, lpNumberOfBytesWritten=0x2fd148, lpOverlapped=0x0 | out: lpBuffer=0x28a3bf0*, lpNumberOfBytesWritten=0x2fd148*=0x33e, lpOverlapped=0x0) returned 1 [0169.721] SetEndOfFile (hFile=0x178) returned 1 [0169.727] SetEndOfFile (hFile=0x178) returned 1 [0169.734] SetEndOfFile (hFile=0x178) returned 1 [0169.740] SetEndOfFile (hFile=0x178) returned 1 [0169.748] SetEndOfFile (hFile=0x178) returned 1 [0169.758] SetEndOfFile (hFile=0x178) returned 1 [0169.764] SetEndOfFile (hFile=0x178) returned 1 [0169.773] SetEndOfFile (hFile=0x178) returned 1 [0169.781] SetEndOfFile (hFile=0x178) returned 1 [0169.787] SetEndOfFile (hFile=0x178) returned 1 [0169.794] SetEndOfFile (hFile=0x178) returned 1 [0169.801] SetEndOfFile (hFile=0x178) returned 1 [0169.808] SetEndOfFile (hFile=0x178) returned 1 [0169.814] SetEndOfFile (hFile=0x178) returned 1 [0169.820] SetEndOfFile (hFile=0x178) returned 1 [0169.827] SetEndOfFile (hFile=0x178) returned 1 [0169.833] SetEndOfFile (hFile=0x178) returned 1 [0169.840] SetEndOfFile (hFile=0x178) returned 1 [0169.847] SetEndOfFile (hFile=0x178) returned 1 [0169.854] SetEndOfFile (hFile=0x178) returned 1 [0169.863] SetEndOfFile (hFile=0x178) returned 1 [0169.870] SetEndOfFile (hFile=0x178) returned 1 [0169.879] SetEndOfFile (hFile=0x178) returned 1 [0169.888] SetEndOfFile (hFile=0x178) returned 1 [0169.895] SetEndOfFile (hFile=0x178) returned 1 [0169.902] SetEndOfFile (hFile=0x178) returned 1 [0169.943] SetEndOfFile (hFile=0x178) returned 1 [0169.951] SetEndOfFile (hFile=0x178) returned 1 [0169.957] SetEndOfFile (hFile=0x178) returned 1 [0169.964] SetEndOfFile (hFile=0x178) returned 1 [0169.973] SetEndOfFile (hFile=0x178) returned 1 [0169.984] SetEndOfFile (hFile=0x178) returned 1 [0169.992] SetEndOfFile (hFile=0x178) returned 1 [0169.999] SetEndOfFile (hFile=0x178) returned 1 [0170.005] SetEndOfFile (hFile=0x178) returned 1 [0170.011] SetEndOfFile (hFile=0x178) returned 1 [0170.019] SetEndOfFile (hFile=0x178) returned 1 [0170.026] SetEndOfFile (hFile=0x178) returned 1 [0170.033] SetEndOfFile (hFile=0x178) returned 1 [0170.040] SetEndOfFile (hFile=0x178) returned 1 [0170.047] SetEndOfFile (hFile=0x178) returned 1 [0170.053] SetEndOfFile (hFile=0x178) returned 1 [0170.061] SetEndOfFile (hFile=0x178) returned 1 [0170.068] SetEndOfFile (hFile=0x178) returned 1 [0170.075] SetEndOfFile (hFile=0x178) returned 1 [0170.105] SetEndOfFile (hFile=0x178) returned 1 [0170.112] SetEndOfFile (hFile=0x178) returned 1 [0170.119] SetEndOfFile (hFile=0x178) returned 1 [0170.126] SetEndOfFile (hFile=0x178) returned 1 [0170.133] SetEndOfFile (hFile=0x178) returned 1 [0170.139] SetEndOfFile (hFile=0x178) returned 1 [0170.150] SetEndOfFile (hFile=0x178) returned 1 [0170.157] SetEndOfFile (hFile=0x178) returned 1 [0170.164] SetEndOfFile (hFile=0x178) returned 1 [0170.172] SetEndOfFile (hFile=0x178) returned 1 [0170.178] SetEndOfFile (hFile=0x178) returned 1 [0170.188] SetEndOfFile (hFile=0x178) returned 1 [0170.194] SetEndOfFile (hFile=0x178) returned 1 [0170.199] SetEndOfFile (hFile=0x178) returned 1 [0170.208] SetEndOfFile (hFile=0x178) returned 1 [0170.214] SetEndOfFile (hFile=0x178) returned 1 [0170.221] SetEndOfFile (hFile=0x178) returned 1 [0170.228] SetEndOfFile (hFile=0x178) returned 1 [0170.234] SetEndOfFile (hFile=0x178) returned 1 [0170.241] SetEndOfFile (hFile=0x178) returned 1 [0170.249] SetEndOfFile (hFile=0x178) returned 1 [0170.255] SetEndOfFile (hFile=0x178) returned 1 [0170.266] SetEndOfFile (hFile=0x178) returned 1 [0170.273] SetEndOfFile (hFile=0x178) returned 1 [0170.279] SetEndOfFile (hFile=0x178) returned 1 [0170.286] SetEndOfFile (hFile=0x178) returned 1 [0170.295] SetEndOfFile (hFile=0x178) returned 1 [0170.302] SetEndOfFile (hFile=0x178) returned 1 [0170.309] SetEndOfFile (hFile=0x178) returned 1 [0170.316] SetEndOfFile (hFile=0x178) returned 1 [0170.323] SetEndOfFile (hFile=0x178) returned 1 [0170.332] WriteFile (in: hFile=0x25c, lpBuffer=0x28afba4*, nNumberOfBytesToWrite=0x33e, lpNumberOfBytesWritten=0x2fcc0c, lpOverlapped=0x0 | out: lpBuffer=0x28afba4*, lpNumberOfBytesWritten=0x2fcc0c*=0x33e, lpOverlapped=0x0) returned 1 [0170.335] SetEndOfFile (hFile=0x178) returned 1 [0170.344] SetEndOfFile (hFile=0x178) returned 1 [0170.350] SetEndOfFile (hFile=0x178) returned 1 [0170.356] SetEndOfFile (hFile=0x178) returned 1 [0170.362] SetEndOfFile (hFile=0x178) returned 1 [0170.369] SetEndOfFile (hFile=0x178) returned 1 [0170.379] SetEndOfFile (hFile=0x178) returned 1 [0170.386] SetEndOfFile (hFile=0x178) returned 1 [0170.394] SetEndOfFile (hFile=0x178) returned 1 [0170.400] SetEndOfFile (hFile=0x178) returned 1 [0170.407] SetEndOfFile (hFile=0x178) returned 1 [0170.414] SetEndOfFile (hFile=0x178) returned 1 [0170.421] SetEndOfFile (hFile=0x178) returned 1 [0170.430] SetEndOfFile (hFile=0x178) returned 1 [0170.437] SetEndOfFile (hFile=0x178) returned 1 [0170.443] SetEndOfFile (hFile=0x178) returned 1 [0170.451] SetEndOfFile (hFile=0x178) returned 1 [0170.458] SetEndOfFile (hFile=0x178) returned 1 [0170.464] SetEndOfFile (hFile=0x178) returned 1 [0170.471] SetEndOfFile (hFile=0x178) returned 1 [0170.478] SetEndOfFile (hFile=0x178) returned 1 [0170.485] SetEndOfFile (hFile=0x178) returned 1 [0170.493] SetEndOfFile (hFile=0x178) returned 1 [0170.500] SetEndOfFile (hFile=0x178) returned 1 [0170.507] SetEndOfFile (hFile=0x178) returned 1 [0170.513] SetEndOfFile (hFile=0x178) returned 1 [0170.520] SetEndOfFile (hFile=0x178) returned 1 [0170.528] SetEndOfFile (hFile=0x178) returned 1 [0170.535] SetEndOfFile (hFile=0x178) returned 1 [0170.548] SetEndOfFile (hFile=0x178) returned 1 [0170.554] SetEndOfFile (hFile=0x178) returned 1 [0170.561] SetEndOfFile (hFile=0x178) returned 1 [0170.571] SetEndOfFile (hFile=0x178) returned 1 [0170.578] SetEndOfFile (hFile=0x178) returned 1 [0170.595] SetEndOfFile (hFile=0x178) returned 1 [0170.604] SetEndOfFile (hFile=0x178) returned 1 [0170.613] SetEndOfFile (hFile=0x178) returned 1 [0170.619] SetEndOfFile (hFile=0x178) returned 1 [0170.626] SetEndOfFile (hFile=0x178) returned 1 [0170.633] SetEndOfFile (hFile=0x178) returned 1 [0170.640] SetEndOfFile (hFile=0x178) returned 1 [0170.647] SetEndOfFile (hFile=0x178) returned 1 [0170.654] SetEndOfFile (hFile=0x178) returned 1 [0170.660] SetEndOfFile (hFile=0x178) returned 1 [0170.668] SetEndOfFile (hFile=0x178) returned 1 [0170.675] SetEndOfFile (hFile=0x178) returned 1 [0170.681] SetEndOfFile (hFile=0x178) returned 1 [0170.687] SetEndOfFile (hFile=0x178) returned 1 [0170.692] SetEndOfFile (hFile=0x178) returned 1 [0170.703] SetEndOfFile (hFile=0x178) returned 1 [0170.710] SetEndOfFile (hFile=0x178) returned 1 [0170.717] SetEndOfFile (hFile=0x178) returned 1 [0170.724] SetEndOfFile (hFile=0x178) returned 1 [0170.731] SetEndOfFile (hFile=0x178) returned 1 [0170.742] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0170.743] SetEndOfFile (hFile=0x178) returned 1 [0170.753] SetEndOfFile (hFile=0x178) returned 1 [0170.759] SetEndOfFile (hFile=0x178) returned 1 [0170.770] SetEndOfFile (hFile=0x178) returned 1 [0170.776] SetEndOfFile (hFile=0x178) returned 1 [0170.783] SetEndOfFile (hFile=0x178) returned 1 [0170.789] SetEndOfFile (hFile=0x178) returned 1 [0170.797] SetEndOfFile (hFile=0x178) returned 1 [0170.804] SetEndOfFile (hFile=0x178) returned 1 [0170.810] SetEndOfFile (hFile=0x178) returned 1 [0170.817] SetEndOfFile (hFile=0x178) returned 1 [0170.824] SetEndOfFile (hFile=0x178) returned 1 [0170.830] SetEndOfFile (hFile=0x178) returned 1 [0170.837] SetEndOfFile (hFile=0x178) returned 1 [0170.846] SetEndOfFile (hFile=0x178) returned 1 [0170.852] SetEndOfFile (hFile=0x178) returned 1 [0170.858] SetEndOfFile (hFile=0x178) returned 1 [0170.864] SetEndOfFile (hFile=0x178) returned 1 [0170.870] SetEndOfFile (hFile=0x178) returned 1 [0170.877] SetEndOfFile (hFile=0x178) returned 1 [0170.885] SetEndOfFile (hFile=0x178) returned 1 [0170.893] SetEndOfFile (hFile=0x178) returned 1 [0170.899] SetEndOfFile (hFile=0x178) returned 1 [0170.907] SetEndOfFile (hFile=0x178) returned 1 [0170.914] SetEndOfFile (hFile=0x178) returned 1 [0170.921] SetEndOfFile (hFile=0x178) returned 1 [0170.934] SetEndOfFile (hFile=0x178) returned 1 [0170.941] SetEndOfFile (hFile=0x178) returned 1 [0170.946] SetEndOfFile (hFile=0x178) returned 1 [0170.957] SetEndOfFile (hFile=0x178) returned 1 [0170.965] SetEndOfFile (hFile=0x178) returned 1 [0170.974] SetEndOfFile (hFile=0x178) returned 1 [0170.982] SetEndOfFile (hFile=0x178) returned 1 [0170.989] SetEndOfFile (hFile=0x178) returned 1 [0170.995] SetEndOfFile (hFile=0x178) returned 1 [0171.002] SetEndOfFile (hFile=0x178) returned 1 [0171.009] SetEndOfFile (hFile=0x178) returned 1 [0171.016] SetEndOfFile (hFile=0x178) returned 1 [0171.022] SetEndOfFile (hFile=0x178) returned 1 [0171.028] SetEndOfFile (hFile=0x178) returned 1 [0171.035] SetEndOfFile (hFile=0x178) returned 1 [0171.041] SetEndOfFile (hFile=0x178) returned 1 [0171.049] SetEndOfFile (hFile=0x178) returned 1 [0171.056] SetEndOfFile (hFile=0x178) returned 1 [0171.068] SetEndOfFile (hFile=0x178) returned 1 [0171.097] SetEndOfFile (hFile=0x178) returned 1 [0171.107] SetEndOfFile (hFile=0x178) returned 1 [0171.113] SetEndOfFile (hFile=0x178) returned 1 [0171.123] SetEndOfFile (hFile=0x178) returned 1 [0171.130] SetEndOfFile (hFile=0x178) returned 1 [0171.137] SetEndOfFile (hFile=0x178) returned 1 [0171.148] SetEndOfFile (hFile=0x178) returned 1 [0171.156] SetEndOfFile (hFile=0x178) returned 1 [0171.162] SetEndOfFile (hFile=0x178) returned 1 [0171.173] SetEndOfFile (hFile=0x178) returned 1 [0171.180] SetEndOfFile (hFile=0x178) returned 1 [0171.187] SetEndOfFile (hFile=0x178) returned 1 [0171.195] SetEndOfFile (hFile=0x178) returned 1 [0171.201] SetEndOfFile (hFile=0x178) returned 1 [0171.207] SetEndOfFile (hFile=0x178) returned 1 [0171.213] SetEndOfFile (hFile=0x178) returned 1 [0171.220] SetEndOfFile (hFile=0x178) returned 1 [0171.227] SetEndOfFile (hFile=0x178) returned 1 [0171.234] SetEndOfFile (hFile=0x178) returned 1 [0171.241] SetEndOfFile (hFile=0x178) returned 1 [0171.249] SetEndOfFile (hFile=0x178) returned 1 [0171.254] SetEndOfFile (hFile=0x178) returned 1 [0171.261] SetEndOfFile (hFile=0x178) returned 1 [0171.268] SetEndOfFile (hFile=0x178) returned 1 [0171.273] SetEndOfFile (hFile=0x178) returned 1 [0171.283] SetEndOfFile (hFile=0x178) returned 1 [0171.286] SetEndOfFile (hFile=0x178) returned 1 [0171.295] SetEndOfFile (hFile=0x178) returned 1 [0171.301] SetEndOfFile (hFile=0x178) returned 1 [0171.306] SetEndOfFile (hFile=0x178) returned 1 [0171.313] SetEndOfFile (hFile=0x178) returned 1 [0171.319] SetEndOfFile (hFile=0x178) returned 1 [0171.327] SetEndOfFile (hFile=0x178) returned 1 [0171.335] SetEndOfFile (hFile=0x178) returned 1 [0171.345] SetEndOfFile (hFile=0x178) returned 1 [0171.352] SetEndOfFile (hFile=0x178) returned 1 [0171.360] SetEndOfFile (hFile=0x178) returned 1 [0171.367] SetEndOfFile (hFile=0x178) returned 1 [0171.373] SetEndOfFile (hFile=0x178) returned 1 [0171.379] SetEndOfFile (hFile=0x178) returned 1 [0171.385] SetEndOfFile (hFile=0x178) returned 1 [0171.392] SetEndOfFile (hFile=0x178) returned 1 [0171.398] SetEndOfFile (hFile=0x178) returned 1 [0171.406] SetEndOfFile (hFile=0x178) returned 1 [0171.413] SetEndOfFile (hFile=0x178) returned 1 [0171.420] SetEndOfFile (hFile=0x178) returned 1 [0171.428] SetEndOfFile (hFile=0x178) returned 1 [0171.435] SetEndOfFile (hFile=0x178) returned 1 [0171.441] SetEndOfFile (hFile=0x178) returned 1 [0171.453] SetEndOfFile (hFile=0x178) returned 1 [0171.461] SetEndOfFile (hFile=0x178) returned 1 [0171.467] SetEndOfFile (hFile=0x178) returned 1 [0171.474] SetEndOfFile (hFile=0x178) returned 1 [0171.481] SetEndOfFile (hFile=0x178) returned 1 [0171.487] SetEndOfFile (hFile=0x178) returned 1 [0171.494] SetEndOfFile (hFile=0x178) returned 1 [0171.501] SetEndOfFile (hFile=0x178) returned 1 [0171.512] SetEndOfFile (hFile=0x178) returned 1 [0171.519] SetEndOfFile (hFile=0x178) returned 1 [0171.525] SetEndOfFile (hFile=0x178) returned 1 [0171.535] SetEndOfFile (hFile=0x178) returned 1 [0171.541] SetEndOfFile (hFile=0x178) returned 1 [0171.548] SetEndOfFile (hFile=0x178) returned 1 [0171.555] SetEndOfFile (hFile=0x178) returned 1 [0171.561] SetEndOfFile (hFile=0x178) returned 1 [0171.568] SetEndOfFile (hFile=0x178) returned 1 [0171.574] SetEndOfFile (hFile=0x178) returned 1 [0171.580] SetEndOfFile (hFile=0x178) returned 1 [0171.586] SetEndOfFile (hFile=0x178) returned 1 [0171.601] SetEndOfFile (hFile=0x178) returned 1 [0171.606] SetEndOfFile (hFile=0x178) returned 1 [0171.613] SetEndOfFile (hFile=0x178) returned 1 [0171.619] SetEndOfFile (hFile=0x178) returned 1 [0171.626] SetEndOfFile (hFile=0x178) returned 1 [0171.633] SetEndOfFile (hFile=0x178) returned 1 [0171.639] SetEndOfFile (hFile=0x178) returned 1 [0171.645] SetEndOfFile (hFile=0x178) returned 1 [0171.653] SetEndOfFile (hFile=0x178) returned 1 [0171.659] SetEndOfFile (hFile=0x178) returned 1 [0171.665] SetEndOfFile (hFile=0x178) returned 1 [0171.672] SetEndOfFile (hFile=0x178) returned 1 [0171.678] SetEndOfFile (hFile=0x178) returned 1 [0171.684] SetEndOfFile (hFile=0x178) returned 1 [0171.689] WriteFile (in: hFile=0x178, lpBuffer=0x28cfe5c*, nNumberOfBytesToWrite=0x340, lpNumberOfBytesWritten=0x2fc234, lpOverlapped=0x0 | out: lpBuffer=0x28cfe5c*, lpNumberOfBytesWritten=0x2fc234*=0x340, lpOverlapped=0x0) returned 1 [0171.694] SetEndOfFile (hFile=0x178) returned 1 [0171.699] SetEndOfFile (hFile=0x178) returned 1 [0171.705] SetEndOfFile (hFile=0x178) returned 1 [0171.715] SetEndOfFile (hFile=0x178) returned 1 [0171.722] SetEndOfFile (hFile=0x178) returned 1 [0171.729] SetEndOfFile (hFile=0x178) returned 1 [0171.735] SetEndOfFile (hFile=0x178) returned 1 [0171.741] SetEndOfFile (hFile=0x178) returned 1 [0171.748] SetEndOfFile (hFile=0x178) returned 1 [0171.754] SetEndOfFile (hFile=0x178) returned 1 [0171.762] SetEndOfFile (hFile=0x178) returned 1 [0171.768] SetEndOfFile (hFile=0x178) returned 1 [0171.774] SetEndOfFile (hFile=0x178) returned 1 [0171.780] SetEndOfFile (hFile=0x178) returned 1 [0171.787] SetEndOfFile (hFile=0x178) returned 1 [0171.794] SetEndOfFile (hFile=0x178) returned 1 [0171.799] SetEndOfFile (hFile=0x178) returned 1 [0171.806] SetEndOfFile (hFile=0x178) returned 1 [0171.812] SetEndOfFile (hFile=0x178) returned 1 [0171.818] SetEndOfFile (hFile=0x178) returned 1 [0171.824] SetEndOfFile (hFile=0x178) returned 1 [0171.830] SetEndOfFile (hFile=0x178) returned 1 [0171.836] SetEndOfFile (hFile=0x178) returned 1 [0171.842] SetEndOfFile (hFile=0x178) returned 1 [0171.847] SetEndOfFile (hFile=0x178) returned 1 [0171.854] SetEndOfFile (hFile=0x178) returned 1 [0171.863] SetEndOfFile (hFile=0x178) returned 1 [0171.869] SetEndOfFile (hFile=0x178) returned 1 [0171.875] SetEndOfFile (hFile=0x178) returned 1 [0171.884] SetEndOfFile (hFile=0x178) returned 1 [0171.938] SetEndOfFile (hFile=0x178) returned 1 [0171.943] SetEndOfFile (hFile=0x178) returned 1 [0171.948] SetEndOfFile (hFile=0x178) returned 1 [0171.955] SetEndOfFile (hFile=0x178) returned 1 [0171.960] SetEndOfFile (hFile=0x178) returned 1 [0171.965] SetEndOfFile (hFile=0x178) returned 1 [0171.970] SetEndOfFile (hFile=0x178) returned 1 [0171.978] SetEndOfFile (hFile=0x178) returned 1 [0171.985] SetEndOfFile (hFile=0x178) returned 1 [0171.991] SetEndOfFile (hFile=0x178) returned 1 [0171.996] SetEndOfFile (hFile=0x178) returned 1 [0172.002] SetEndOfFile (hFile=0x178) returned 1 [0172.009] SetEndOfFile (hFile=0x178) returned 1 [0172.013] SetEndOfFile (hFile=0x178) returned 1 [0172.026] SetEndOfFile (hFile=0x178) returned 1 [0172.031] SetEndOfFile (hFile=0x178) returned 1 [0172.035] SetEndOfFile (hFile=0x178) returned 1 [0172.040] SetEndOfFile (hFile=0x178) returned 1 [0172.045] SetEndOfFile (hFile=0x178) returned 1 [0172.051] SetEndOfFile (hFile=0x178) returned 1 [0172.056] SetEndOfFile (hFile=0x178) returned 1 [0172.060] SetEndOfFile (hFile=0x178) returned 1 [0172.069] SetEndOfFile (hFile=0x178) returned 1 [0172.167] SetEndOfFile (hFile=0x178) returned 1 [0172.175] SetEndOfFile (hFile=0x178) returned 1 [0172.287] SetEndOfFile (hFile=0x178) returned 1 [0172.296] SetEndOfFile (hFile=0x178) returned 1 [0172.302] SetEndOfFile (hFile=0x178) returned 1 [0172.311] SetEndOfFile (hFile=0x178) returned 1 [0172.318] SetEndOfFile (hFile=0x178) returned 1 [0172.324] SetEndOfFile (hFile=0x178) returned 1 [0172.332] SetEndOfFile (hFile=0x178) returned 1 [0172.339] SetEndOfFile (hFile=0x178) returned 1 [0172.347] SetEndOfFile (hFile=0x178) returned 1 [0172.356] SetEndOfFile (hFile=0x178) returned 1 [0172.363] SetEndOfFile (hFile=0x178) returned 1 [0172.369] SetEndOfFile (hFile=0x178) returned 1 [0172.375] SetEndOfFile (hFile=0x178) returned 1 [0172.382] SetEndOfFile (hFile=0x178) returned 1 [0172.389] SetEndOfFile (hFile=0x178) returned 1 [0172.395] SetEndOfFile (hFile=0x178) returned 1 [0172.403] SetEndOfFile (hFile=0x178) returned 1 [0172.410] SetEndOfFile (hFile=0x178) returned 1 [0172.416] SetEndOfFile (hFile=0x178) returned 1 [0172.424] SetEndOfFile (hFile=0x178) returned 1 [0172.431] SetEndOfFile (hFile=0x178) returned 1 [0172.438] SetEndOfFile (hFile=0x178) returned 1 [0172.454] SetEndOfFile (hFile=0x178) returned 1 [0172.461] SetEndOfFile (hFile=0x178) returned 1 [0172.469] SetEndOfFile (hFile=0x178) returned 1 [0172.476] SetEndOfFile (hFile=0x178) returned 1 [0172.483] SetEndOfFile (hFile=0x178) returned 1 [0172.489] SetEndOfFile (hFile=0x178) returned 1 [0172.498] SetEndOfFile (hFile=0x178) returned 1 [0172.505] SetEndOfFile (hFile=0x178) returned 1 [0172.511] SetEndOfFile (hFile=0x178) returned 1 [0172.522] SetEndOfFile (hFile=0x178) returned 1 [0172.529] SetEndOfFile (hFile=0x178) returned 1 [0172.534] SetEndOfFile (hFile=0x178) returned 1 [0172.539] SetEndOfFile (hFile=0x178) returned 1 [0172.764] SetEndOfFile (hFile=0x178) returned 1 [0172.769] SetEndOfFile (hFile=0x178) returned 1 [0172.774] SetEndOfFile (hFile=0x178) returned 1 [0172.780] SetEndOfFile (hFile=0x178) returned 1 [0172.787] SetEndOfFile (hFile=0x178) returned 1 [0172.792] SetEndOfFile (hFile=0x178) returned 1 [0172.798] SetEndOfFile (hFile=0x178) returned 1 [0172.803] SetEndOfFile (hFile=0x178) returned 1 [0172.809] SetEndOfFile (hFile=0x178) returned 1 [0172.817] SetEndOfFile (hFile=0x178) returned 1 [0172.822] SetEndOfFile (hFile=0x178) returned 1 [0172.830] SetEndOfFile (hFile=0x178) returned 1 [0172.836] SetEndOfFile (hFile=0x178) returned 1 [0172.842] SetEndOfFile (hFile=0x178) returned 1 [0172.847] SetEndOfFile (hFile=0x178) returned 1 [0172.855] SetEndOfFile (hFile=0x178) returned 1 [0172.861] SetEndOfFile (hFile=0x178) returned 1 [0172.867] SetEndOfFile (hFile=0x178) returned 1 [0172.875] SetEndOfFile (hFile=0x178) returned 1 [0172.883] SetEndOfFile (hFile=0x178) returned 1 [0172.888] SetEndOfFile (hFile=0x178) returned 1 [0172.894] SetEndOfFile (hFile=0x178) returned 1 [0172.899] SetEndOfFile (hFile=0x178) returned 1 [0172.904] SetEndOfFile (hFile=0x178) returned 1 [0172.910] SetEndOfFile (hFile=0x178) returned 1 [0172.918] SetEndOfFile (hFile=0x178) returned 1 [0172.924] SetEndOfFile (hFile=0x178) returned 1 [0172.929] SetEndOfFile (hFile=0x178) returned 1 [0172.936] SetEndOfFile (hFile=0x178) returned 1 [0172.942] SetEndOfFile (hFile=0x178) returned 1 [0172.947] SetEndOfFile (hFile=0x178) returned 1 [0172.954] SetEndOfFile (hFile=0x178) returned 1 [0172.960] SetEndOfFile (hFile=0x178) returned 1 [0172.965] SetEndOfFile (hFile=0x178) returned 1 [0172.972] SetEndOfFile (hFile=0x178) returned 1 [0172.979] SetEndOfFile (hFile=0x178) returned 1 [0172.986] SetEndOfFile (hFile=0x178) returned 1 [0173.000] SetEndOfFile (hFile=0x178) returned 1 [0173.006] SetEndOfFile (hFile=0x178) returned 1 [0173.012] SetEndOfFile (hFile=0x178) returned 1 [0173.021] SetEndOfFile (hFile=0x178) returned 1 [0173.027] SetEndOfFile (hFile=0x178) returned 1 [0173.035] SetEndOfFile (hFile=0x178) returned 1 [0173.040] SetEndOfFile (hFile=0x178) returned 1 [0173.045] SetEndOfFile (hFile=0x178) returned 1 [0173.053] SetEndOfFile (hFile=0x178) returned 1 [0173.060] SetEndOfFile (hFile=0x178) returned 1 [0173.067] SetEndOfFile (hFile=0x178) returned 1 [0173.091] SetEndOfFile (hFile=0x178) returned 1 [0173.097] SetEndOfFile (hFile=0x178) returned 1 [0173.105] SetEndOfFile (hFile=0x178) returned 1 [0173.112] SetEndOfFile (hFile=0x178) returned 1 [0173.119] SetEndOfFile (hFile=0x178) returned 1 [0173.126] SetEndOfFile (hFile=0x178) returned 1 [0173.132] SetEndOfFile (hFile=0x178) returned 1 [0173.139] SetEndOfFile (hFile=0x178) returned 1 [0173.145] SetEndOfFile (hFile=0x178) returned 1 [0173.152] SetEndOfFile (hFile=0x178) returned 1 [0173.158] SetEndOfFile (hFile=0x178) returned 1 [0173.163] SetEndOfFile (hFile=0x178) returned 1 [0173.169] SetEndOfFile (hFile=0x178) returned 1 [0173.173] SetEndOfFile (hFile=0x178) returned 1 [0173.178] SetEndOfFile (hFile=0x178) returned 1 [0173.187] SetEndOfFile (hFile=0x178) returned 1 [0173.192] SetEndOfFile (hFile=0x178) returned 1 [0173.197] SetEndOfFile (hFile=0x178) returned 1 [0173.204] SetEndOfFile (hFile=0x178) returned 1 [0173.208] SetEndOfFile (hFile=0x178) returned 1 [0173.214] SetEndOfFile (hFile=0x178) returned 1 [0173.219] SetEndOfFile (hFile=0x178) returned 1 [0173.225] SetEndOfFile (hFile=0x178) returned 1 [0173.230] SetEndOfFile (hFile=0x178) returned 1 [0173.235] SetEndOfFile (hFile=0x178) returned 1 [0173.241] SetEndOfFile (hFile=0x178) returned 1 [0173.246] SetEndOfFile (hFile=0x178) returned 1 [0173.251] SetEndOfFile (hFile=0x178) returned 1 [0173.259] SetEndOfFile (hFile=0x178) returned 1 [0173.265] SetEndOfFile (hFile=0x178) returned 1 [0173.270] SetEndOfFile (hFile=0x178) returned 1 [0173.277] SetEndOfFile (hFile=0x178) returned 1 [0173.282] SetEndOfFile (hFile=0x178) returned 1 [0173.286] SetEndOfFile (hFile=0x178) returned 1 [0173.293] SetEndOfFile (hFile=0x178) returned 1 [0173.299] SetEndOfFile (hFile=0x178) returned 1 [0173.305] SetEndOfFile (hFile=0x178) returned 1 [0173.311] SetEndOfFile (hFile=0x178) returned 1 [0173.318] SetEndOfFile (hFile=0x178) returned 1 [0173.324] SetEndOfFile (hFile=0x178) returned 1 [0173.331] SetEndOfFile (hFile=0x178) returned 1 [0173.336] SetEndOfFile (hFile=0x178) returned 1 [0173.342] SetEndOfFile (hFile=0x178) returned 1 [0173.347] SetEndOfFile (hFile=0x178) returned 1 [0173.355] SetEndOfFile (hFile=0x178) returned 1 [0173.360] SetEndOfFile (hFile=0x178) returned 1 [0173.364] SetEndOfFile (hFile=0x178) returned 1 [0173.371] SetEndOfFile (hFile=0x178) returned 1 [0173.375] SetEndOfFile (hFile=0x178) returned 1 [0173.380] SetEndOfFile (hFile=0x178) returned 1 [0173.388] SetEndOfFile (hFile=0x178) returned 1 [0173.393] SetEndOfFile (hFile=0x178) returned 1 [0173.397] SetEndOfFile (hFile=0x178) returned 1 [0173.402] SetEndOfFile (hFile=0x178) returned 1 [0173.407] SetEndOfFile (hFile=0x178) returned 1 [0173.412] SetEndOfFile (hFile=0x178) returned 1 [0173.419] SetEndOfFile (hFile=0x178) returned 1 [0173.424] SetEndOfFile (hFile=0x178) returned 1 [0173.428] SetEndOfFile (hFile=0x178) returned 1 [0173.434] SetEndOfFile (hFile=0x178) returned 1 [0173.439] SetEndOfFile (hFile=0x178) returned 1 [0173.444] SetEndOfFile (hFile=0x178) returned 1 [0173.450] SetEndOfFile (hFile=0x178) returned 1 [0173.454] SetEndOfFile (hFile=0x178) returned 1 [0173.460] SetEndOfFile (hFile=0x178) returned 1 [0173.465] SetEndOfFile (hFile=0x178) returned 1 [0173.478] SetEndOfFile (hFile=0x178) returned 1 [0173.485] SetEndOfFile (hFile=0x178) returned 1 [0173.493] SetEndOfFile (hFile=0x178) returned 1 [0173.499] SetEndOfFile (hFile=0x178) returned 1 [0173.508] SetEndOfFile (hFile=0x178) returned 1 [0173.513] SetEndOfFile (hFile=0x178) returned 1 [0173.521] SetEndOfFile (hFile=0x178) returned 1 [0173.525] SetEndOfFile (hFile=0x178) returned 1 [0173.531] SetEndOfFile (hFile=0x178) returned 1 [0173.536] SetEndOfFile (hFile=0x178) returned 1 [0173.541] SetEndOfFile (hFile=0x178) returned 1 [0173.546] SetEndOfFile (hFile=0x178) returned 1 [0173.551] SetEndOfFile (hFile=0x178) returned 1 [0173.557] SetEndOfFile (hFile=0x178) returned 1 [0173.563] SetEndOfFile (hFile=0x178) returned 1 [0173.567] SetEndOfFile (hFile=0x178) returned 1 [0173.573] SetEndOfFile (hFile=0x178) returned 1 [0173.578] SetEndOfFile (hFile=0x178) returned 1 [0173.582] SetEndOfFile (hFile=0x178) returned 1 [0173.587] SetEndOfFile (hFile=0x178) returned 1 [0173.591] SetEndOfFile (hFile=0x178) returned 1 [0173.598] SetEndOfFile (hFile=0x178) returned 1 [0173.610] SetEndOfFile (hFile=0x178) returned 1 [0173.615] SetEndOfFile (hFile=0x178) returned 1 [0173.620] SetEndOfFile (hFile=0x178) returned 1 [0173.625] SetEndOfFile (hFile=0x178) returned 1 [0173.633] SetEndOfFile (hFile=0x178) returned 1 [0173.641] SetEndOfFile (hFile=0x178) returned 1 [0173.645] SetEndOfFile (hFile=0x178) returned 1 [0173.658] SetEndOfFile (hFile=0x178) returned 1 [0173.665] SetEndOfFile (hFile=0x178) returned 1 [0173.671] SetEndOfFile (hFile=0x178) returned 1 [0173.679] SetEndOfFile (hFile=0x178) returned 1 [0173.686] SetEndOfFile (hFile=0x178) returned 1 [0173.692] SetEndOfFile (hFile=0x178) returned 1 [0173.700] SetEndOfFile (hFile=0x178) returned 1 [0173.710] SetEndOfFile (hFile=0x178) returned 1 [0173.716] SetEndOfFile (hFile=0x178) returned 1 [0173.724] SetEndOfFile (hFile=0x178) returned 1 [0173.731] SetEndOfFile (hFile=0x178) returned 1 [0173.737] SetEndOfFile (hFile=0x178) returned 1 [0173.744] SetEndOfFile (hFile=0x178) returned 1 [0173.750] SetEndOfFile (hFile=0x178) returned 1 [0173.757] SetEndOfFile (hFile=0x178) returned 1 [0173.763] SetEndOfFile (hFile=0x178) returned 1 [0173.770] SetEndOfFile (hFile=0x178) returned 1 [0173.778] SetEndOfFile (hFile=0x178) returned 1 [0173.784] SetEndOfFile (hFile=0x178) returned 1 [0173.792] SetEndOfFile (hFile=0x178) returned 1 [0173.799] SetEndOfFile (hFile=0x178) returned 1 [0173.806] SetEndOfFile (hFile=0x178) returned 1 [0173.816] SetEndOfFile (hFile=0x178) returned 1 [0173.829] SetEndOfFile (hFile=0x178) returned 1 [0173.839] SetEndOfFile (hFile=0x178) returned 1 [0173.847] SetEndOfFile (hFile=0x178) returned 1 [0173.854] SetEndOfFile (hFile=0x178) returned 1 [0173.860] SetEndOfFile (hFile=0x178) returned 1 [0173.869] SetEndOfFile (hFile=0x178) returned 1 [0173.876] SetEndOfFile (hFile=0x178) returned 1 [0173.893] SetEndOfFile (hFile=0x178) returned 1 [0173.918] SetEndOfFile (hFile=0x178) returned 1 [0173.924] SetEndOfFile (hFile=0x178) returned 1 [0173.930] SetEndOfFile (hFile=0x178) returned 1 [0173.935] SetEndOfFile (hFile=0x178) returned 1 [0173.940] SetEndOfFile (hFile=0x178) returned 1 [0173.945] SetEndOfFile (hFile=0x178) returned 1 [0173.950] SetEndOfFile (hFile=0x178) returned 1 [0173.956] SetEndOfFile (hFile=0x178) returned 1 [0173.961] SetEndOfFile (hFile=0x178) returned 1 [0173.966] SetEndOfFile (hFile=0x178) returned 1 [0173.973] SetEndOfFile (hFile=0x178) returned 1 [0173.980] SetEndOfFile (hFile=0x178) returned 1 [0173.985] SetEndOfFile (hFile=0x178) returned 1 [0173.994] SetEndOfFile (hFile=0x178) returned 1 [0173.999] SetEndOfFile (hFile=0x178) returned 1 [0174.004] SetEndOfFile (hFile=0x178) returned 1 [0174.010] SetEndOfFile (hFile=0x178) returned 1 [0174.017] SetEndOfFile (hFile=0x178) returned 1 [0174.029] SetEndOfFile (hFile=0x178) returned 1 [0174.044] SetEndOfFile (hFile=0x178) returned 1 [0174.051] SetEndOfFile (hFile=0x178) returned 1 [0174.060] SetEndOfFile (hFile=0x178) returned 1 [0174.066] SetEndOfFile (hFile=0x178) returned 1 [0174.074] SetEndOfFile (hFile=0x178) returned 1 [0174.081] SetEndOfFile (hFile=0x178) returned 1 [0174.103] SetEndOfFile (hFile=0x178) returned 1 [0174.109] SetEndOfFile (hFile=0x178) returned 1 [0174.115] SetEndOfFile (hFile=0x178) returned 1 [0174.123] SetEndOfFile (hFile=0x178) returned 1 [0174.129] SetEndOfFile (hFile=0x178) returned 1 [0174.138] SetEndOfFile (hFile=0x178) returned 1 [0174.145] SetEndOfFile (hFile=0x178) returned 1 [0174.151] SetEndOfFile (hFile=0x178) returned 1 [0174.159] SetEndOfFile (hFile=0x178) returned 1 [0174.166] SetEndOfFile (hFile=0x178) returned 1 [0174.172] SetEndOfFile (hFile=0x178) returned 1 [0174.184] SetEndOfFile (hFile=0x178) returned 1 [0174.192] SetEndOfFile (hFile=0x178) returned 1 [0174.198] SetEndOfFile (hFile=0x178) returned 1 [0174.206] SetEndOfFile (hFile=0x178) returned 1 [0174.213] SetEndOfFile (hFile=0x178) returned 1 [0174.219] SetEndOfFile (hFile=0x178) returned 1 [0174.228] SetEndOfFile (hFile=0x178) returned 1 [0174.240] SetEndOfFile (hFile=0x178) returned 1 [0174.248] SetEndOfFile (hFile=0x178) returned 1 [0174.257] SetEndOfFile (hFile=0x178) returned 1 [0174.264] SetEndOfFile (hFile=0x178) returned 1 [0174.271] SetEndOfFile (hFile=0x178) returned 1 [0174.278] SetEndOfFile (hFile=0x178) returned 1 [0174.284] SetEndOfFile (hFile=0x178) returned 1 [0174.292] SetEndOfFile (hFile=0x178) returned 1 [0174.299] SetEndOfFile (hFile=0x178) returned 1 [0174.307] SetEndOfFile (hFile=0x178) returned 1 [0174.315] SetEndOfFile (hFile=0x178) returned 1 [0174.322] SetEndOfFile (hFile=0x178) returned 1 [0174.329] SetEndOfFile (hFile=0x178) returned 1 [0174.337] SetEndOfFile (hFile=0x178) returned 1 [0174.343] SetEndOfFile (hFile=0x178) returned 1 [0174.353] SetEndOfFile (hFile=0x178) returned 1 [0174.360] SetEndOfFile (hFile=0x178) returned 1 [0174.372] SetEndOfFile (hFile=0x178) returned 1 [0174.380] SetEndOfFile (hFile=0x178) returned 1 [0174.387] SetEndOfFile (hFile=0x178) returned 1 [0174.394] SetEndOfFile (hFile=0x178) returned 1 [0174.402] SetEndOfFile (hFile=0x178) returned 1 [0174.410] SetEndOfFile (hFile=0x178) returned 1 [0174.418] SetEndOfFile (hFile=0x178) returned 1 [0174.426] SetEndOfFile (hFile=0x178) returned 1 [0174.436] WriteFile (in: hFile=0x25c, lpBuffer=0x290ba00*, nNumberOfBytesToWrite=0x33e, lpNumberOfBytesWritten=0x2fcc0c, lpOverlapped=0x0 | out: lpBuffer=0x290ba00*, lpNumberOfBytesWritten=0x2fcc0c*=0x33e, lpOverlapped=0x0) returned 1 [0174.438] CloseHandle (hObject=0x25c) returned 1 [0174.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc8dc) returned 1 [0174.439] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh", nBufferLength=0x105, lpBuffer=0x2fc3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh", lpFilePart=0x0) returned 0x65 [0174.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc64c) returned 1 [0174.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc8ac) returned 1 [0174.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc8dc) returned 1 [0174.440] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh", nBufferLength=0x105, lpBuffer=0x2fc3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh", lpFilePart=0x0) returned 0x65 [0174.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc64c) returned 1 [0174.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc8ac) returned 1 [0174.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0174.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc1e4) returned 1 [0174.441] GetFileType (hFile=0x25c) returned 0x1 [0174.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0174.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc1e4) returned 1 [0174.441] GetFileType (hFile=0x178) returned 0x1 [0174.441] SetEndOfFile (hFile=0x178) returned 1 [0174.446] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0174.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0174.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0174.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0174.449] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fcb9c) returned 1 [0174.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fcb98) returned 1 [0174.449] GetFileType (hFile=0x25c) returned 0x1 [0174.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc8dc) returned 1 [0174.451] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ", nBufferLength=0x105, lpBuffer=0x2fc3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ", lpFilePart=0x0) returned 0x6d [0174.451] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe45bb30, ftCreationTime.dwHighDateTime=0x1d75a0b, ftLastAccessTime.dwLowDateTime=0x9ec81fb0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ec81fb0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.451] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876ca1b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876ca1b0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876ca1b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x4bc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fK9AO96eyAc5.flv.Poteston", cAlternateFileName="FK9AO9~1.POT")) returned 1 [0174.451] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876f0310, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876f0310, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876f0310, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8ca0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hioo8c.mkv.Poteston", cAlternateFileName="HIOO8C~1.POT")) returned 1 [0174.451] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87716470, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x9ec81fb0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ec81fb0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0174.451] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8773c5d0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8773c5d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ec81fb0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0174.451] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876f0310, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876f0310, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876f0310, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x10450, dwReserved0=0x0, dwReserved1=0x0, cFileName="WhtX.mkv.Poteston", cAlternateFileName="WHTXMK~1.POT")) returned 1 [0174.451] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876f0310, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876f0310, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876f0310, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x10450, dwReserved0=0x0, dwReserved1=0x0, cFileName="WhtX.mkv.Poteston", cAlternateFileName="WHTXMK~1.POT")) returned 0 [0174.452] FindClose (in: hFindFile=0x3caa80 | out: hFindFile=0x3caa80) returned 1 [0174.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc64c) returned 1 [0174.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc8ac) returned 1 [0174.452] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc8dc) returned 1 [0174.452] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ", nBufferLength=0x105, lpBuffer=0x2fc3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ", lpFilePart=0x0) returned 0x6d [0174.452] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe45bb30, ftCreationTime.dwHighDateTime=0x1d75a0b, ftLastAccessTime.dwLowDateTime=0x9ec81fb0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ec81fb0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.452] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876ca1b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876ca1b0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876ca1b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x4bc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fK9AO96eyAc5.flv.Poteston", cAlternateFileName="FK9AO9~1.POT")) returned 1 [0174.452] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876f0310, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876f0310, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876f0310, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8ca0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hioo8c.mkv.Poteston", cAlternateFileName="HIOO8C~1.POT")) returned 1 [0174.452] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87716470, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x9ec81fb0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ec81fb0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0174.453] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8773c5d0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8773c5d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ec81fb0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0174.453] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876f0310, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876f0310, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876f0310, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x10450, dwReserved0=0x0, dwReserved1=0x0, cFileName="WhtX.mkv.Poteston", cAlternateFileName="WHTXMK~1.POT")) returned 1 [0174.453] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0174.453] FindClose (in: hFindFile=0x3caa80 | out: hFindFile=0x3caa80) returned 1 [0174.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc64c) returned 1 [0174.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc8ac) returned 1 [0174.453] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0174.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc1e4) returned 1 [0174.454] GetFileType (hFile=0x25c) returned 0x1 [0174.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0174.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc1e4) returned 1 [0174.454] GetFileType (hFile=0x178) returned 0x1 [0174.454] SetEndOfFile (hFile=0x178) returned 1 [0174.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0174.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0174.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0174.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0174.464] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0174.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0174.466] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0174.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0174.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fcb9c) returned 1 [0174.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fcb98) returned 1 [0174.468] GetFileType (hFile=0x25c) returned 0x1 [0174.469] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc724) returned 1 [0174.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc720) returned 1 [0174.469] GetFileType (hFile=0x25c) returned 0x1 [0174.469] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc724) returned 1 [0174.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc720) returned 1 [0174.470] GetFileType (hFile=0x178) returned 0x1 [0174.470] SetEndOfFile (hFile=0x178) returned 1 [0174.473] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc724) returned 1 [0174.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb540) returned 1 [0174.475] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc724) returned 1 [0174.475] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb540) returned 1 [0174.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc724) returned 1 [0174.476] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb540) returned 1 [0174.477] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc724) returned 1 [0174.477] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb540) returned 1 [0174.478] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc724) returned 1 [0174.478] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb540) returned 1 [0174.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc724) returned 1 [0174.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb540) returned 1 [0174.480] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc8dc) returned 1 [0174.480] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU", nBufferLength=0x105, lpBuffer=0x2fc3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU", lpFilePart=0x0) returned 0x6e [0174.480] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347857c0, ftCreationTime.dwHighDateTime=0x1d75bb1, ftLastAccessTime.dwLowDateTime=0x9eca8110, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9eca8110, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.480] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87631c30, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87631c30, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x87657d90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xc1c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D091oF_.swf.Poteston", cAlternateFileName="D091OF~1.POT")) returned 1 [0174.480] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87657d90, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87657d90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x87657d90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xab80, dwReserved0=0x0, dwReserved1=0x0, cFileName="hd1DiUlGE54s6YEpZ.mkv.Poteston", cAlternateFileName="HD1DIU~1.POT")) returned 1 [0174.480] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87657d90, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87657d90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x8767def0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xf050, dwReserved0=0x0, dwReserved1=0x0, cFileName="QFFDU_FwV.avi.Poteston", cAlternateFileName="QFFDU_~1.POT")) returned 1 [0174.480] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8767def0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8767def0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x8767def0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8c80, dwReserved0=0x0, dwReserved1=0x0, cFileName="QZgBMdzaEM6oXeH90ZZ.swf.Poteston", cAlternateFileName="QZGBMD~1.POT")) returned 1 [0174.480] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876a4050, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x9eca8110, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9eca8110, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0174.481] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87716470, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87716470, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9eca8110, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0174.481] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8767def0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8767def0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876a4050, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x189c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="y3LlbNlOVLYa.flv.Poteston", cAlternateFileName="Y3LLBN~1.POT")) returned 1 [0174.481] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8767def0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8767def0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876a4050, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x189c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="y3LlbNlOVLYa.flv.Poteston", cAlternateFileName="Y3LLBN~1.POT")) returned 0 [0174.481] FindClose (in: hFindFile=0x3caa80 | out: hFindFile=0x3caa80) returned 1 [0174.481] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc64c) returned 1 [0174.481] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc8ac) returned 1 [0174.481] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc8dc) returned 1 [0174.481] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU", nBufferLength=0x105, lpBuffer=0x2fc3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU", lpFilePart=0x0) returned 0x6e [0174.481] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347857c0, ftCreationTime.dwHighDateTime=0x1d75bb1, ftLastAccessTime.dwLowDateTime=0x9eca8110, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9eca8110, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.482] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87631c30, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87631c30, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x87657d90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xc1c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D091oF_.swf.Poteston", cAlternateFileName="D091OF~1.POT")) returned 1 [0174.482] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87657d90, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87657d90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x87657d90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xab80, dwReserved0=0x0, dwReserved1=0x0, cFileName="hd1DiUlGE54s6YEpZ.mkv.Poteston", cAlternateFileName="HD1DIU~1.POT")) returned 1 [0174.482] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87657d90, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87657d90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x8767def0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xf050, dwReserved0=0x0, dwReserved1=0x0, cFileName="QFFDU_FwV.avi.Poteston", cAlternateFileName="QFFDU_~1.POT")) returned 1 [0174.482] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8767def0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8767def0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x8767def0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8c80, dwReserved0=0x0, dwReserved1=0x0, cFileName="QZgBMdzaEM6oXeH90ZZ.swf.Poteston", cAlternateFileName="QZGBMD~1.POT")) returned 1 [0174.482] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876a4050, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x9eca8110, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9eca8110, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0174.482] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87716470, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87716470, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9eca8110, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0174.482] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8767def0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8767def0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876a4050, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x189c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="y3LlbNlOVLYa.flv.Poteston", cAlternateFileName="Y3LLBN~1.POT")) returned 1 [0174.482] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0174.482] FindClose (in: hFindFile=0x3caa80 | out: hFindFile=0x3caa80) returned 1 [0174.482] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc64c) returned 1 [0174.482] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc8ac) returned 1 [0174.483] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0174.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc1e4) returned 1 [0174.484] GetFileType (hFile=0x25c) returned 0x1 [0174.484] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0174.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc1e4) returned 1 [0174.484] GetFileType (hFile=0x178) returned 0x1 [0174.484] SetEndOfFile (hFile=0x178) returned 1 [0174.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0174.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0174.489] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0174.489] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0174.490] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0174.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0174.491] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0174.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0174.492] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0174.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0174.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0174.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0174.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fcb9c) returned 1 [0174.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fcb98) returned 1 [0174.495] GetFileType (hFile=0x25c) returned 0x1 [0174.497] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc8dc) returned 1 [0174.497] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh", nBufferLength=0x105, lpBuffer=0x2fc3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh", lpFilePart=0x0) returned 0x65 [0174.497] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdca4ffc0, ftCreationTime.dwHighDateTime=0x1d751cf, ftLastAccessTime.dwLowDateTime=0x9ecce270, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ecce270, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.497] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876a4050, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876a4050, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876ca1b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xaaf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JH7gB.avi.Poteston", cAlternateFileName="JH7GBA~1.POT")) returned 1 [0174.497] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876ca1b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x9ecce270, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ecce270, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0174.497] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8773c5d0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8773c5d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ecce270, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0174.497] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8773c5d0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8773c5d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ecce270, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 0 [0174.497] FindClose (in: hFindFile=0x3caa80 | out: hFindFile=0x3caa80) returned 1 [0174.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc64c) returned 1 [0174.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc8ac) returned 1 [0174.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc8dc) returned 1 [0174.498] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh", nBufferLength=0x105, lpBuffer=0x2fc3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh", lpFilePart=0x0) returned 0x65 [0174.498] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdca4ffc0, ftCreationTime.dwHighDateTime=0x1d751cf, ftLastAccessTime.dwLowDateTime=0x9ecce270, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ecce270, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.498] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876a4050, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876a4050, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876ca1b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xaaf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JH7gB.avi.Poteston", cAlternateFileName="JH7GBA~1.POT")) returned 1 [0174.498] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876ca1b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x9ecce270, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ecce270, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0174.498] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8773c5d0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8773c5d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ecce270, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0174.498] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0174.498] FindClose (in: hFindFile=0x3caa80 | out: hFindFile=0x3caa80) returned 1 [0174.499] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc64c) returned 1 [0174.499] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc8ac) returned 1 [0174.499] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0174.499] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc1e4) returned 1 [0174.499] GetFileType (hFile=0x25c) returned 0x1 [0174.499] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0174.499] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc1e4) returned 1 [0174.500] GetFileType (hFile=0x178) returned 0x1 [0174.500] SetEndOfFile (hFile=0x178) returned 1 [0174.503] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0174.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0174.504] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0174.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0174.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fcb9c) returned 1 [0174.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fcb98) returned 1 [0174.506] GetFileType (hFile=0x25c) returned 0x1 [0174.508] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc8dc) returned 1 [0174.508] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ", nBufferLength=0x105, lpBuffer=0x2fc3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ", lpFilePart=0x0) returned 0x6d [0174.508] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe45bb30, ftCreationTime.dwHighDateTime=0x1d75a0b, ftLastAccessTime.dwLowDateTime=0x9ecf43d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ecf43d0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.508] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876ca1b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876ca1b0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876ca1b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x4bc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fK9AO96eyAc5.flv.Poteston", cAlternateFileName="FK9AO9~1.POT")) returned 1 [0174.508] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876f0310, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876f0310, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876f0310, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8ca0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hioo8c.mkv.Poteston", cAlternateFileName="HIOO8C~1.POT")) returned 1 [0174.508] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87716470, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x9ecf43d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ecf43d0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0174.508] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8773c5d0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8773c5d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ecce270, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0174.508] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876f0310, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876f0310, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876f0310, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x10450, dwReserved0=0x0, dwReserved1=0x0, cFileName="WhtX.mkv.Poteston", cAlternateFileName="WHTXMK~1.POT")) returned 1 [0174.508] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876f0310, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876f0310, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876f0310, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x10450, dwReserved0=0x0, dwReserved1=0x0, cFileName="WhtX.mkv.Poteston", cAlternateFileName="WHTXMK~1.POT")) returned 0 [0174.508] FindClose (in: hFindFile=0x3caa80 | out: hFindFile=0x3caa80) returned 1 [0174.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc64c) returned 1 [0174.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc8ac) returned 1 [0174.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc8dc) returned 1 [0174.509] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ", nBufferLength=0x105, lpBuffer=0x2fc3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ", lpFilePart=0x0) returned 0x6d [0174.509] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe45bb30, ftCreationTime.dwHighDateTime=0x1d75a0b, ftLastAccessTime.dwLowDateTime=0x9ecf43d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ecf43d0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.509] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876ca1b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876ca1b0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876ca1b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x4bc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fK9AO96eyAc5.flv.Poteston", cAlternateFileName="FK9AO9~1.POT")) returned 1 [0174.509] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876f0310, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876f0310, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876f0310, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8ca0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hioo8c.mkv.Poteston", cAlternateFileName="HIOO8C~1.POT")) returned 1 [0174.509] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87716470, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x9ecf43d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ecf43d0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0174.509] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8773c5d0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8773c5d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ecce270, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0174.509] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876f0310, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876f0310, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876f0310, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x10450, dwReserved0=0x0, dwReserved1=0x0, cFileName="WhtX.mkv.Poteston", cAlternateFileName="WHTXMK~1.POT")) returned 1 [0174.509] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0174.510] FindClose (in: hFindFile=0x3caa80 | out: hFindFile=0x3caa80) returned 1 [0174.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc64c) returned 1 [0174.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc8ac) returned 1 [0174.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0174.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc1e4) returned 1 [0174.510] GetFileType (hFile=0x25c) returned 0x1 [0174.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0174.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc1e4) returned 1 [0174.511] GetFileType (hFile=0x178) returned 0x1 [0174.511] SetEndOfFile (hFile=0x178) returned 1 [0174.514] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0174.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0174.515] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0174.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0174.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0174.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0174.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0174.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0174.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fcb9c) returned 1 [0174.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fcb98) returned 1 [0174.519] GetFileType (hFile=0x25c) returned 0x1 [0174.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc8dc) returned 1 [0174.521] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU", nBufferLength=0x105, lpBuffer=0x2fc3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU", lpFilePart=0x0) returned 0x6e [0174.521] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347857c0, ftCreationTime.dwHighDateTime=0x1d75bb1, ftLastAccessTime.dwLowDateTime=0x9ed40690, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ed40690, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.522] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87631c30, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87631c30, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x87657d90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xc1c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D091oF_.swf.Poteston", cAlternateFileName="D091OF~1.POT")) returned 1 [0174.522] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87657d90, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87657d90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x87657d90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xab80, dwReserved0=0x0, dwReserved1=0x0, cFileName="hd1DiUlGE54s6YEpZ.mkv.Poteston", cAlternateFileName="HD1DIU~1.POT")) returned 1 [0174.522] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87657d90, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87657d90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x8767def0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xf050, dwReserved0=0x0, dwReserved1=0x0, cFileName="QFFDU_FwV.avi.Poteston", cAlternateFileName="QFFDU_~1.POT")) returned 1 [0174.522] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8767def0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8767def0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x8767def0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8c80, dwReserved0=0x0, dwReserved1=0x0, cFileName="QZgBMdzaEM6oXeH90ZZ.swf.Poteston", cAlternateFileName="QZGBMD~1.POT")) returned 1 [0174.522] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876a4050, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x9ed40690, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ed40690, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0174.522] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87716470, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87716470, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ed1a530, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0174.522] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8767def0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8767def0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876a4050, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x189c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="y3LlbNlOVLYa.flv.Poteston", cAlternateFileName="Y3LLBN~1.POT")) returned 1 [0174.522] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8767def0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8767def0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876a4050, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x189c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="y3LlbNlOVLYa.flv.Poteston", cAlternateFileName="Y3LLBN~1.POT")) returned 0 [0174.522] FindClose (in: hFindFile=0x3caa80 | out: hFindFile=0x3caa80) returned 1 [0174.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc64c) returned 1 [0174.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc8ac) returned 1 [0174.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc8dc) returned 1 [0174.523] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU", nBufferLength=0x105, lpBuffer=0x2fc3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU", lpFilePart=0x0) returned 0x6e [0174.523] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347857c0, ftCreationTime.dwHighDateTime=0x1d75bb1, ftLastAccessTime.dwLowDateTime=0x9ed40690, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ed40690, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.523] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87631c30, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87631c30, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x87657d90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xc1c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D091oF_.swf.Poteston", cAlternateFileName="D091OF~1.POT")) returned 1 [0174.523] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87657d90, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87657d90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x87657d90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xab80, dwReserved0=0x0, dwReserved1=0x0, cFileName="hd1DiUlGE54s6YEpZ.mkv.Poteston", cAlternateFileName="HD1DIU~1.POT")) returned 1 [0174.523] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87657d90, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87657d90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x8767def0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xf050, dwReserved0=0x0, dwReserved1=0x0, cFileName="QFFDU_FwV.avi.Poteston", cAlternateFileName="QFFDU_~1.POT")) returned 1 [0174.523] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8767def0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8767def0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x8767def0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8c80, dwReserved0=0x0, dwReserved1=0x0, cFileName="QZgBMdzaEM6oXeH90ZZ.swf.Poteston", cAlternateFileName="QZGBMD~1.POT")) returned 1 [0174.523] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876a4050, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x9ed40690, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ed40690, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0174.523] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87716470, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87716470, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ed1a530, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0174.523] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8767def0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8767def0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876a4050, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x189c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="y3LlbNlOVLYa.flv.Poteston", cAlternateFileName="Y3LLBN~1.POT")) returned 1 [0174.523] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0174.523] FindClose (in: hFindFile=0x3caa80 | out: hFindFile=0x3caa80) returned 1 [0174.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc64c) returned 1 [0174.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc8ac) returned 1 [0174.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0174.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc1e4) returned 1 [0174.525] GetFileType (hFile=0x25c) returned 0x1 [0174.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0174.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc1e4) returned 1 [0174.525] GetFileType (hFile=0x178) returned 0x1 [0174.525] SetEndOfFile (hFile=0x178) returned 1 [0174.529] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0174.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0174.530] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0174.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0174.532] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0174.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0174.533] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0174.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0174.535] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0174.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0174.536] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0174.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0174.539] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fcb9c) returned 1 [0174.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fcb98) returned 1 [0174.540] GetFileType (hFile=0x25c) returned 0x1 [0174.541] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc8dc) returned 1 [0174.541] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh", nBufferLength=0x105, lpBuffer=0x2fc3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh", lpFilePart=0x0) returned 0x65 [0174.542] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdca4ffc0, ftCreationTime.dwHighDateTime=0x1d751cf, ftLastAccessTime.dwLowDateTime=0x9ed667f0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ed667f0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.542] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876a4050, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876a4050, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876ca1b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xaaf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JH7gB.avi.Poteston", cAlternateFileName="JH7GBA~1.POT")) returned 1 [0174.542] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876ca1b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x9ed667f0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ed667f0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0174.542] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8773c5d0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8773c5d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ed40690, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0174.542] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8773c5d0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8773c5d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ed40690, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 0 [0174.542] FindClose (in: hFindFile=0x3caa80 | out: hFindFile=0x3caa80) returned 1 [0174.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc64c) returned 1 [0174.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc8ac) returned 1 [0174.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc8dc) returned 1 [0174.542] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh", nBufferLength=0x105, lpBuffer=0x2fc3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh", lpFilePart=0x0) returned 0x65 [0174.543] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdca4ffc0, ftCreationTime.dwHighDateTime=0x1d751cf, ftLastAccessTime.dwLowDateTime=0x9ed667f0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ed667f0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.543] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876a4050, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876a4050, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876ca1b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xaaf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JH7gB.avi.Poteston", cAlternateFileName="JH7GBA~1.POT")) returned 1 [0174.543] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876ca1b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x9ed667f0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ed667f0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0174.543] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8773c5d0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8773c5d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ed40690, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0174.543] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0174.543] FindClose (in: hFindFile=0x3caa80 | out: hFindFile=0x3caa80) returned 1 [0174.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc64c) returned 1 [0174.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc8ac) returned 1 [0174.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0174.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc1e4) returned 1 [0174.544] GetFileType (hFile=0x25c) returned 0x1 [0174.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0174.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc1e4) returned 1 [0174.544] GetFileType (hFile=0x178) returned 0x1 [0174.544] SetEndOfFile (hFile=0x178) returned 1 [0174.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0174.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0174.550] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0174.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0174.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fcb9c) returned 1 [0174.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fcb98) returned 1 [0174.552] GetFileType (hFile=0x25c) returned 0x1 [0174.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc8dc) returned 1 [0174.554] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ", nBufferLength=0x105, lpBuffer=0x2fc3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ", lpFilePart=0x0) returned 0x6d [0174.554] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe45bb30, ftCreationTime.dwHighDateTime=0x1d75a0b, ftLastAccessTime.dwLowDateTime=0x9ed667f0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ed667f0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.554] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876ca1b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876ca1b0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876ca1b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x4bc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fK9AO96eyAc5.flv.Poteston", cAlternateFileName="FK9AO9~1.POT")) returned 1 [0174.554] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876f0310, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876f0310, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876f0310, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8ca0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hioo8c.mkv.Poteston", cAlternateFileName="HIOO8C~1.POT")) returned 1 [0174.554] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87716470, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x9ed667f0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ed667f0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0174.554] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8773c5d0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8773c5d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ed667f0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0174.554] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876f0310, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876f0310, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876f0310, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x10450, dwReserved0=0x0, dwReserved1=0x0, cFileName="WhtX.mkv.Poteston", cAlternateFileName="WHTXMK~1.POT")) returned 1 [0174.554] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876f0310, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876f0310, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876f0310, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x10450, dwReserved0=0x0, dwReserved1=0x0, cFileName="WhtX.mkv.Poteston", cAlternateFileName="WHTXMK~1.POT")) returned 0 [0174.555] FindClose (in: hFindFile=0x3caa80 | out: hFindFile=0x3caa80) returned 1 [0174.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc64c) returned 1 [0174.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc8ac) returned 1 [0174.555] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc8dc) returned 1 [0174.555] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ", nBufferLength=0x105, lpBuffer=0x2fc3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ", lpFilePart=0x0) returned 0x6d [0174.555] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe45bb30, ftCreationTime.dwHighDateTime=0x1d75a0b, ftLastAccessTime.dwLowDateTime=0x9ed667f0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ed667f0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.555] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876ca1b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876ca1b0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876ca1b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x4bc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fK9AO96eyAc5.flv.Poteston", cAlternateFileName="FK9AO9~1.POT")) returned 1 [0174.555] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876f0310, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876f0310, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876f0310, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8ca0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hioo8c.mkv.Poteston", cAlternateFileName="HIOO8C~1.POT")) returned 1 [0174.555] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87716470, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x9ed667f0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ed667f0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0174.555] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8773c5d0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8773c5d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ed667f0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0174.556] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876f0310, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876f0310, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876f0310, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x10450, dwReserved0=0x0, dwReserved1=0x0, cFileName="WhtX.mkv.Poteston", cAlternateFileName="WHTXMK~1.POT")) returned 1 [0174.556] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0174.556] FindClose (in: hFindFile=0x3caa80 | out: hFindFile=0x3caa80) returned 1 [0174.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc64c) returned 1 [0174.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc8ac) returned 1 [0174.556] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0174.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc1e4) returned 1 [0174.557] GetFileType (hFile=0x25c) returned 0x1 [0174.557] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0174.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc1e4) returned 1 [0174.557] GetFileType (hFile=0x178) returned 0x1 [0174.557] SetEndOfFile (hFile=0x178) returned 1 [0174.560] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0174.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0174.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0174.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0174.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0174.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0174.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0174.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0174.567] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fcb9c) returned 1 [0174.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fcb98) returned 1 [0174.568] GetFileType (hFile=0x25c) returned 0x1 [0174.570] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc8dc) returned 1 [0174.570] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347857c0, ftCreationTime.dwHighDateTime=0x1d75bb1, ftLastAccessTime.dwLowDateTime=0x9edb2ab0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9edb2ab0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.570] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87631c30, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87631c30, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x87657d90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xc1c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D091oF_.swf.Poteston", cAlternateFileName="D091OF~1.POT")) returned 1 [0174.570] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87657d90, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87657d90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x87657d90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xab80, dwReserved0=0x0, dwReserved1=0x0, cFileName="hd1DiUlGE54s6YEpZ.mkv.Poteston", cAlternateFileName="HD1DIU~1.POT")) returned 1 [0174.570] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87657d90, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87657d90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x8767def0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xf050, dwReserved0=0x0, dwReserved1=0x0, cFileName="QFFDU_FwV.avi.Poteston", cAlternateFileName="QFFDU_~1.POT")) returned 1 [0174.570] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8767def0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8767def0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x8767def0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8c80, dwReserved0=0x0, dwReserved1=0x0, cFileName="QZgBMdzaEM6oXeH90ZZ.swf.Poteston", cAlternateFileName="QZGBMD~1.POT")) returned 1 [0174.570] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876a4050, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x9edb2ab0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9edb2ab0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0174.570] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87716470, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87716470, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ed8c950, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0174.570] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8767def0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8767def0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876a4050, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x189c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="y3LlbNlOVLYa.flv.Poteston", cAlternateFileName="Y3LLBN~1.POT")) returned 1 [0174.571] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8767def0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8767def0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876a4050, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x189c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="y3LlbNlOVLYa.flv.Poteston", cAlternateFileName="Y3LLBN~1.POT")) returned 0 [0174.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc64c) returned 1 [0174.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc8ac) returned 1 [0174.571] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc8dc) returned 1 [0174.571] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347857c0, ftCreationTime.dwHighDateTime=0x1d75bb1, ftLastAccessTime.dwLowDateTime=0x9edb2ab0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9edb2ab0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.571] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87631c30, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87631c30, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x87657d90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xc1c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D091oF_.swf.Poteston", cAlternateFileName="D091OF~1.POT")) returned 1 [0174.571] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87657d90, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87657d90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x87657d90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xab80, dwReserved0=0x0, dwReserved1=0x0, cFileName="hd1DiUlGE54s6YEpZ.mkv.Poteston", cAlternateFileName="HD1DIU~1.POT")) returned 1 [0174.571] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87657d90, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87657d90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x8767def0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xf050, dwReserved0=0x0, dwReserved1=0x0, cFileName="QFFDU_FwV.avi.Poteston", cAlternateFileName="QFFDU_~1.POT")) returned 1 [0174.571] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8767def0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8767def0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x8767def0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8c80, dwReserved0=0x0, dwReserved1=0x0, cFileName="QZgBMdzaEM6oXeH90ZZ.swf.Poteston", cAlternateFileName="QZGBMD~1.POT")) returned 1 [0174.571] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876a4050, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x9edb2ab0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9edb2ab0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0174.572] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87716470, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87716470, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ed8c950, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0174.572] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8767def0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8767def0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876a4050, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x189c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="y3LlbNlOVLYa.flv.Poteston", cAlternateFileName="Y3LLBN~1.POT")) returned 1 [0174.572] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0174.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc64c) returned 1 [0174.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc8ac) returned 1 [0174.573] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0174.573] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc1e4) returned 1 [0174.573] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0174.573] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc1e4) returned 1 [0174.573] SetEndOfFile (hFile=0x178) returned 1 [0174.577] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0174.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0174.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0174.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0174.580] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0174.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0174.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0174.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0174.583] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0174.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0174.586] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0174.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0174.588] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fcb9c) returned 1 [0174.589] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fcb98) returned 1 [0174.590] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc8dc) returned 1 [0174.590] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdca4ffc0, ftCreationTime.dwHighDateTime=0x1d751cf, ftLastAccessTime.dwLowDateTime=0x9edb2ab0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9edb2ab0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.590] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876a4050, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876a4050, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876ca1b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xaaf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JH7gB.avi.Poteston", cAlternateFileName="JH7GBA~1.POT")) returned 1 [0174.591] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876ca1b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x9edb2ab0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9edd8c10, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0174.591] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8773c5d0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8773c5d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9edb2ab0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0174.591] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8773c5d0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8773c5d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9edb2ab0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 0 [0174.591] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc64c) returned 1 [0174.591] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc8ac) returned 1 [0174.591] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc8dc) returned 1 [0174.591] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdca4ffc0, ftCreationTime.dwHighDateTime=0x1d751cf, ftLastAccessTime.dwLowDateTime=0x9edb2ab0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9edb2ab0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.591] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876a4050, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876a4050, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876ca1b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xaaf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JH7gB.avi.Poteston", cAlternateFileName="JH7GBA~1.POT")) returned 1 [0174.591] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876ca1b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x9edb2ab0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9edd8c10, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0174.591] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8773c5d0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8773c5d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9edb2ab0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0174.592] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0174.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc64c) returned 1 [0174.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc8ac) returned 1 [0174.592] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0174.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc1e4) returned 1 [0174.592] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0174.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc1e4) returned 1 [0174.592] SetEndOfFile (hFile=0x178) returned 1 [0174.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0174.597] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0174.597] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0174.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0174.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fcb9c) returned 1 [0174.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fcb98) returned 1 [0174.621] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc8dc) returned 1 [0174.621] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe45bb30, ftCreationTime.dwHighDateTime=0x1d75a0b, ftLastAccessTime.dwLowDateTime=0x9edd8c10, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9edd8c10, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.621] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876ca1b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876ca1b0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876ca1b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x4bc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fK9AO96eyAc5.flv.Poteston", cAlternateFileName="FK9AO9~1.POT")) returned 1 [0174.621] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876f0310, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876f0310, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876f0310, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8ca0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hioo8c.mkv.Poteston", cAlternateFileName="HIOO8C~1.POT")) returned 1 [0174.621] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87716470, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x9edd8c10, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9edfed70, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0174.621] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8773c5d0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8773c5d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9edd8c10, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0174.622] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876f0310, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876f0310, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876f0310, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x10450, dwReserved0=0x0, dwReserved1=0x0, cFileName="WhtX.mkv.Poteston", cAlternateFileName="WHTXMK~1.POT")) returned 1 [0174.622] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876f0310, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876f0310, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876f0310, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x10450, dwReserved0=0x0, dwReserved1=0x0, cFileName="WhtX.mkv.Poteston", cAlternateFileName="WHTXMK~1.POT")) returned 0 [0174.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc64c) returned 1 [0174.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc8ac) returned 1 [0174.622] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc8dc) returned 1 [0174.622] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe45bb30, ftCreationTime.dwHighDateTime=0x1d75a0b, ftLastAccessTime.dwLowDateTime=0x9edd8c10, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9edd8c10, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.623] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876ca1b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876ca1b0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876ca1b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x4bc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fK9AO96eyAc5.flv.Poteston", cAlternateFileName="FK9AO9~1.POT")) returned 1 [0174.623] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876f0310, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876f0310, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876f0310, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8ca0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hioo8c.mkv.Poteston", cAlternateFileName="HIOO8C~1.POT")) returned 1 [0174.623] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87716470, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x9edd8c10, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9edfed70, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0174.623] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8773c5d0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8773c5d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9edd8c10, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0174.623] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876f0310, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876f0310, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876f0310, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x10450, dwReserved0=0x0, dwReserved1=0x0, cFileName="WhtX.mkv.Poteston", cAlternateFileName="WHTXMK~1.POT")) returned 1 [0174.623] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0174.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc64c) returned 1 [0174.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc8ac) returned 1 [0174.624] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0174.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc1e4) returned 1 [0174.624] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0174.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fc1e4) returned 1 [0174.624] SetEndOfFile (hFile=0x178) returned 1 [0174.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0174.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0174.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0174.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0174.631] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0174.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0174.632] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc1e8) returned 1 [0174.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fb008) returned 1 [0174.633] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fcb9c) returned 1 [0174.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fcb98) returned 1 [0174.635] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd0d8) returned 1 [0174.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fd0d4) returned 1 [0174.636] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd614) returned 1 [0174.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fd610) returned 1 [0174.638] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd354) returned 1 [0174.638] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd10c | out: lpFindFileData=0x2fd10c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0d31320, ftCreationTime.dwHighDateTime=0x1d758a0, ftLastAccessTime.dwLowDateTime=0x9ee972f0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ee972f0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.638] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd10c | out: lpFindFileData=0x2fd10c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8760bad0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8760bad0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x87631c30, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x11f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="-d3J0RPctlSwvd6bUP.mp4.Poteston", cAlternateFileName="-D3J0R~1.POT")) returned 1 [0174.639] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd10c | out: lpFindFileData=0x2fd10c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87846f70, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87846f70, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x8786d0d0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x90e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="-djH0-9cycQykYMfJf.swf.Poteston", cAlternateFileName="-DJH0-~1.POT")) returned 1 [0174.639] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd10c | out: lpFindFileData=0x2fd10c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x879c3d30, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x879c3d30, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x879e9e90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x4c70, dwReserved0=0x0, dwReserved1=0x0, cFileName="I9Ky-h.mp4.Poteston", cAlternateFileName="I9KY-H~1.POT")) returned 1 [0174.639] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd10c | out: lpFindFileData=0x2fd10c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36628860, ftCreationTime.dwHighDateTime=0x1d7550a, ftLastAccessTime.dwLowDateTime=0x9ee972f0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ee972f0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LvrtiqeAx zdKEixkd", cAlternateFileName="LVRTIQ~1")) returned 1 [0174.639] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd10c | out: lpFindFileData=0x2fd10c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87d55e30, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x9ee972f0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ee972f0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0174.639] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd10c | out: lpFindFileData=0x2fd10c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x882b0fb0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x882b0fb0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9e87da90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0174.639] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd10c | out: lpFindFileData=0x2fd10c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87b40af0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87b40af0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x87b66c50, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x13a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="vgYQSls-1Tb.mkv.Poteston", cAlternateFileName="VGYQSL~1.POT")) returned 1 [0174.639] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd10c | out: lpFindFileData=0x2fd10c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87b40af0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87b40af0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x87b66c50, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x13a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="vgYQSls-1Tb.mkv.Poteston", cAlternateFileName="VGYQSL~1.POT")) returned 0 [0174.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fd0c4) returned 1 [0174.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fd324) returned 1 [0174.639] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fd354) returned 1 [0174.640] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd10c | out: lpFindFileData=0x2fd10c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0d31320, ftCreationTime.dwHighDateTime=0x1d758a0, ftLastAccessTime.dwLowDateTime=0x9ee972f0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ee972f0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.640] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd10c | out: lpFindFileData=0x2fd10c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8760bad0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8760bad0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x87631c30, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x11f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="-d3J0RPctlSwvd6bUP.mp4.Poteston", cAlternateFileName="-D3J0R~1.POT")) returned 1 [0174.640] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd10c | out: lpFindFileData=0x2fd10c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87846f70, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87846f70, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x8786d0d0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x90e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="-djH0-9cycQykYMfJf.swf.Poteston", cAlternateFileName="-DJH0-~1.POT")) returned 1 [0174.640] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd10c | out: lpFindFileData=0x2fd10c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x879c3d30, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x879c3d30, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x879e9e90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x4c70, dwReserved0=0x0, dwReserved1=0x0, cFileName="I9Ky-h.mp4.Poteston", cAlternateFileName="I9KY-H~1.POT")) returned 1 [0174.640] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd10c | out: lpFindFileData=0x2fd10c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36628860, ftCreationTime.dwHighDateTime=0x1d7550a, ftLastAccessTime.dwLowDateTime=0x9ee972f0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ee972f0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LvrtiqeAx zdKEixkd", cAlternateFileName="LVRTIQ~1")) returned 1 [0174.640] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd10c | out: lpFindFileData=0x2fd10c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87d55e30, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x9ee972f0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ee972f0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0174.640] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd10c | out: lpFindFileData=0x2fd10c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x882b0fb0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x882b0fb0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9e87da90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0174.640] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd10c | out: lpFindFileData=0x2fd10c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87b40af0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87b40af0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x87b66c50, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x13a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="vgYQSls-1Tb.mkv.Poteston", cAlternateFileName="VGYQSL~1.POT")) returned 1 [0174.641] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fd10c | out: lpFindFileData=0x2fd10c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0174.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fd0c4) returned 1 [0174.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fd324) returned 1 [0174.641] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fce18) returned 1 [0174.642] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fcbd0 | out: lpFindFileData=0x2fcbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36628860, ftCreationTime.dwHighDateTime=0x1d7550a, ftLastAccessTime.dwLowDateTime=0x9ee972f0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ee972f0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.642] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fcbd0 | out: lpFindFileData=0x2fcbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87631c30, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87631c30, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x87631c30, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x6910, dwReserved0=0x0, dwReserved1=0x0, cFileName="-aKUFCbuQ.swf.Poteston", cAlternateFileName="-AKUFC~1.POT")) returned 1 [0174.642] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fcbd0 | out: lpFindFileData=0x2fcbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347857c0, ftCreationTime.dwHighDateTime=0x1d75bb1, ftLastAccessTime.dwLowDateTime=0x9ee24ed0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ee24ed0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2FDVYf8sCprKRTU", cAlternateFileName="2FDVYF~1")) returned 1 [0174.642] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fcbd0 | out: lpFindFileData=0x2fcbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87716470, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87716470, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x87716470, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xf850, dwReserved0=0x0, dwReserved1=0x0, cFileName="7xfmcye_5js1.mp4.Poteston", cAlternateFileName="7XFMCY~1.POT")) returned 1 [0174.642] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fcbd0 | out: lpFindFileData=0x2fcbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdca4ffc0, ftCreationTime.dwHighDateTime=0x1d751cf, ftLastAccessTime.dwLowDateTime=0x9ee71190, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ee71190, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ajlEoh", cAlternateFileName="")) returned 1 [0174.642] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fcbd0 | out: lpFindFileData=0x2fcbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8773c5d0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8773c5d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x87762730, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xe270, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gvk9fdPwcGOG0hFIUQ.mp4.Poteston", cAlternateFileName="GVK9FD~1.POT")) returned 1 [0174.642] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fcbd0 | out: lpFindFileData=0x2fcbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe45bb30, ftCreationTime.dwHighDateTime=0x1d75a0b, ftLastAccessTime.dwLowDateTime=0x9ee972f0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ee972f0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MP8Ghk7Dv AjRZ", cAlternateFileName="MP8GHK~1")) returned 1 [0174.642] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fcbd0 | out: lpFindFileData=0x2fcbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x877ae9f0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x877ae9f0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x877ae9f0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xe4c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="qsRTAwizw4.mp4.Poteston", cAlternateFileName="QSRTAW~1.POT")) returned 1 [0174.642] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fcbd0 | out: lpFindFileData=0x2fcbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87846f70, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x9ee972f0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ee972f0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0174.643] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fcbd0 | out: lpFindFileData=0x2fcbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8792b7b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8792b7b0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ecf43d0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0174.643] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fcbd0 | out: lpFindFileData=0x2fcbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x877facb0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x877facb0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x877facb0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x11c30, dwReserved0=0x0, dwReserved1=0x0, cFileName="T6A7_WIE2aYeyKIBMK.mp4.Poteston", cAlternateFileName="T6A7_W~1.POT")) returned 1 [0174.643] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fcbd0 | out: lpFindFileData=0x2fcbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x877facb0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x877facb0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x877facb0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x11c30, dwReserved0=0x0, dwReserved1=0x0, cFileName="T6A7_WIE2aYeyKIBMK.mp4.Poteston", cAlternateFileName="T6A7_W~1.POT")) returned 0 [0174.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fcb88) returned 1 [0174.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fcde8) returned 1 [0174.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fce18) returned 1 [0174.643] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fcbd0 | out: lpFindFileData=0x2fcbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36628860, ftCreationTime.dwHighDateTime=0x1d7550a, ftLastAccessTime.dwLowDateTime=0x9ee972f0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ee972f0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.644] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fcbd0 | out: lpFindFileData=0x2fcbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87631c30, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87631c30, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x87631c30, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x6910, dwReserved0=0x0, dwReserved1=0x0, cFileName="-aKUFCbuQ.swf.Poteston", cAlternateFileName="-AKUFC~1.POT")) returned 1 [0174.644] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fcbd0 | out: lpFindFileData=0x2fcbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347857c0, ftCreationTime.dwHighDateTime=0x1d75bb1, ftLastAccessTime.dwLowDateTime=0x9ee24ed0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ee24ed0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2FDVYf8sCprKRTU", cAlternateFileName="2FDVYF~1")) returned 1 [0174.644] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fcbd0 | out: lpFindFileData=0x2fcbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87716470, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87716470, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x87716470, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xf850, dwReserved0=0x0, dwReserved1=0x0, cFileName="7xfmcye_5js1.mp4.Poteston", cAlternateFileName="7XFMCY~1.POT")) returned 1 [0174.644] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fcbd0 | out: lpFindFileData=0x2fcbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdca4ffc0, ftCreationTime.dwHighDateTime=0x1d751cf, ftLastAccessTime.dwLowDateTime=0x9ee71190, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ee71190, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ajlEoh", cAlternateFileName="")) returned 1 [0174.644] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fcbd0 | out: lpFindFileData=0x2fcbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8773c5d0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8773c5d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x87762730, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xe270, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gvk9fdPwcGOG0hFIUQ.mp4.Poteston", cAlternateFileName="GVK9FD~1.POT")) returned 1 [0174.644] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fcbd0 | out: lpFindFileData=0x2fcbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe45bb30, ftCreationTime.dwHighDateTime=0x1d75a0b, ftLastAccessTime.dwLowDateTime=0x9ee972f0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ee972f0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MP8Ghk7Dv AjRZ", cAlternateFileName="MP8GHK~1")) returned 1 [0174.644] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fcbd0 | out: lpFindFileData=0x2fcbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x877ae9f0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x877ae9f0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x877ae9f0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xe4c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="qsRTAwizw4.mp4.Poteston", cAlternateFileName="QSRTAW~1.POT")) returned 1 [0174.644] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fcbd0 | out: lpFindFileData=0x2fcbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87846f70, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x9ee972f0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ee972f0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0174.644] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fcbd0 | out: lpFindFileData=0x2fcbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8792b7b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8792b7b0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ecf43d0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0174.644] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fcbd0 | out: lpFindFileData=0x2fcbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x877facb0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x877facb0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x877facb0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x11c30, dwReserved0=0x0, dwReserved1=0x0, cFileName="T6A7_WIE2aYeyKIBMK.mp4.Poteston", cAlternateFileName="T6A7_W~1.POT")) returned 1 [0174.645] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fcbd0 | out: lpFindFileData=0x2fcbd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0174.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fcb88) returned 1 [0174.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fcde8) returned 1 [0174.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fc8dc) returned 1 [0174.646] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347857c0, ftCreationTime.dwHighDateTime=0x1d75bb1, ftLastAccessTime.dwLowDateTime=0x9ee24ed0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ee24ed0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.647] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87631c30, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87631c30, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x87657d90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xc1c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D091oF_.swf.Poteston", cAlternateFileName="D091OF~1.POT")) returned 1 [0174.647] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87657d90, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87657d90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x87657d90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xab80, dwReserved0=0x0, dwReserved1=0x0, cFileName="hd1DiUlGE54s6YEpZ.mkv.Poteston", cAlternateFileName="HD1DIU~1.POT")) returned 1 [0174.648] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87657d90, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87657d90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x8767def0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xf050, dwReserved0=0x0, dwReserved1=0x0, cFileName="QFFDU_FwV.avi.Poteston", cAlternateFileName="QFFDU_~1.POT")) returned 1 [0174.648] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8767def0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8767def0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x8767def0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8c80, dwReserved0=0x0, dwReserved1=0x0, cFileName="QZgBMdzaEM6oXeH90ZZ.swf.Poteston", cAlternateFileName="QZGBMD~1.POT")) returned 1 [0174.648] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876a4050, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x9ee24ed0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ee24ed0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0174.648] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87716470, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87716470, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9edfed70, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0174.648] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8767def0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8767def0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876a4050, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x189c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="y3LlbNlOVLYa.flv.Poteston", cAlternateFileName="Y3LLBN~1.POT")) returned 1 [0174.648] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8767def0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8767def0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876a4050, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x189c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="y3LlbNlOVLYa.flv.Poteston", cAlternateFileName="Y3LLBN~1.POT")) returned 0 [0174.648] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347857c0, ftCreationTime.dwHighDateTime=0x1d75bb1, ftLastAccessTime.dwLowDateTime=0x9ee24ed0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ee24ed0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.649] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87631c30, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87631c30, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x87657d90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xc1c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D091oF_.swf.Poteston", cAlternateFileName="D091OF~1.POT")) returned 1 [0174.649] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87657d90, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87657d90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x87657d90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xab80, dwReserved0=0x0, dwReserved1=0x0, cFileName="hd1DiUlGE54s6YEpZ.mkv.Poteston", cAlternateFileName="HD1DIU~1.POT")) returned 1 [0174.649] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87657d90, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87657d90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x8767def0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xf050, dwReserved0=0x0, dwReserved1=0x0, cFileName="QFFDU_FwV.avi.Poteston", cAlternateFileName="QFFDU_~1.POT")) returned 1 [0174.649] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8767def0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8767def0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x8767def0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8c80, dwReserved0=0x0, dwReserved1=0x0, cFileName="QZgBMdzaEM6oXeH90ZZ.swf.Poteston", cAlternateFileName="QZGBMD~1.POT")) returned 1 [0174.649] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876a4050, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x9ee24ed0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ee24ed0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0174.649] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87716470, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87716470, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9edfed70, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0174.649] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8767def0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8767def0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876a4050, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x189c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="y3LlbNlOVLYa.flv.Poteston", cAlternateFileName="Y3LLBN~1.POT")) returned 1 [0174.649] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0174.651] SetEndOfFile (hFile=0x178) returned 1 [0174.666] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdca4ffc0, ftCreationTime.dwHighDateTime=0x1d751cf, ftLastAccessTime.dwLowDateTime=0x9ee71190, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ee71190, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.666] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876a4050, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876a4050, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876ca1b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xaaf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JH7gB.avi.Poteston", cAlternateFileName="JH7GBA~1.POT")) returned 1 [0174.666] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876ca1b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x9ee71190, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ee71190, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0174.666] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8773c5d0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8773c5d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ee24ed0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0174.667] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8773c5d0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8773c5d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ee24ed0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 0 [0174.667] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdca4ffc0, ftCreationTime.dwHighDateTime=0x1d751cf, ftLastAccessTime.dwLowDateTime=0x9ee71190, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ee71190, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.667] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876a4050, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876a4050, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876ca1b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xaaf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JH7gB.avi.Poteston", cAlternateFileName="JH7GBA~1.POT")) returned 1 [0174.667] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876ca1b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x9ee71190, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ee71190, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0174.667] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8773c5d0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8773c5d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ee24ed0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0174.667] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0174.668] SetEndOfFile (hFile=0x178) returned 1 [0174.677] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe45bb30, ftCreationTime.dwHighDateTime=0x1d75a0b, ftLastAccessTime.dwLowDateTime=0x9ee972f0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ee972f0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.677] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876ca1b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876ca1b0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876ca1b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x4bc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fK9AO96eyAc5.flv.Poteston", cAlternateFileName="FK9AO9~1.POT")) returned 1 [0174.678] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876f0310, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876f0310, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876f0310, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8ca0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hioo8c.mkv.Poteston", cAlternateFileName="HIOO8C~1.POT")) returned 1 [0174.678] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87716470, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x9ee972f0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ee972f0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0174.678] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8773c5d0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8773c5d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ee71190, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0174.678] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876f0310, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876f0310, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876f0310, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x10450, dwReserved0=0x0, dwReserved1=0x0, cFileName="WhtX.mkv.Poteston", cAlternateFileName="WHTXMK~1.POT")) returned 1 [0174.678] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876f0310, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876f0310, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876f0310, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x10450, dwReserved0=0x0, dwReserved1=0x0, cFileName="WhtX.mkv.Poteston", cAlternateFileName="WHTXMK~1.POT")) returned 0 [0174.678] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe45bb30, ftCreationTime.dwHighDateTime=0x1d75a0b, ftLastAccessTime.dwLowDateTime=0x9ee972f0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ee972f0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.679] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876ca1b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876ca1b0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876ca1b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x4bc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fK9AO96eyAc5.flv.Poteston", cAlternateFileName="FK9AO9~1.POT")) returned 1 [0174.679] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876f0310, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876f0310, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876f0310, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8ca0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hioo8c.mkv.Poteston", cAlternateFileName="HIOO8C~1.POT")) returned 1 [0174.679] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87716470, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x9ee972f0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ee972f0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0174.679] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8773c5d0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8773c5d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9ee71190, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0174.679] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876f0310, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876f0310, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876f0310, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x10450, dwReserved0=0x0, dwReserved1=0x0, cFileName="WhtX.mkv.Poteston", cAlternateFileName="WHTXMK~1.POT")) returned 1 [0174.679] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0174.680] SetEndOfFile (hFile=0x178) returned 1 [0174.692] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347857c0, ftCreationTime.dwHighDateTime=0x1d75bb1, ftLastAccessTime.dwLowDateTime=0x9eee35b0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9eee35b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.693] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87631c30, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87631c30, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x87657d90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xc1c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D091oF_.swf.Poteston", cAlternateFileName="D091OF~1.POT")) returned 1 [0174.693] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87657d90, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87657d90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x87657d90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xab80, dwReserved0=0x0, dwReserved1=0x0, cFileName="hd1DiUlGE54s6YEpZ.mkv.Poteston", cAlternateFileName="HD1DIU~1.POT")) returned 1 [0174.693] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87657d90, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87657d90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x8767def0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xf050, dwReserved0=0x0, dwReserved1=0x0, cFileName="QFFDU_FwV.avi.Poteston", cAlternateFileName="QFFDU_~1.POT")) returned 1 [0174.693] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8767def0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8767def0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x8767def0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8c80, dwReserved0=0x0, dwReserved1=0x0, cFileName="QZgBMdzaEM6oXeH90ZZ.swf.Poteston", cAlternateFileName="QZGBMD~1.POT")) returned 1 [0174.693] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876a4050, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x9eee35b0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9eee35b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0174.693] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87716470, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87716470, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9eebd450, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0174.693] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8767def0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8767def0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876a4050, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x189c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="y3LlbNlOVLYa.flv.Poteston", cAlternateFileName="Y3LLBN~1.POT")) returned 1 [0174.693] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8767def0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8767def0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876a4050, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x189c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="y3LlbNlOVLYa.flv.Poteston", cAlternateFileName="Y3LLBN~1.POT")) returned 0 [0174.694] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347857c0, ftCreationTime.dwHighDateTime=0x1d75bb1, ftLastAccessTime.dwLowDateTime=0x9eee35b0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9eee35b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.694] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87631c30, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87631c30, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x87657d90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xc1c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D091oF_.swf.Poteston", cAlternateFileName="D091OF~1.POT")) returned 1 [0174.694] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87657d90, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87657d90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x87657d90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xab80, dwReserved0=0x0, dwReserved1=0x0, cFileName="hd1DiUlGE54s6YEpZ.mkv.Poteston", cAlternateFileName="HD1DIU~1.POT")) returned 1 [0174.694] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87657d90, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87657d90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x8767def0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xf050, dwReserved0=0x0, dwReserved1=0x0, cFileName="QFFDU_FwV.avi.Poteston", cAlternateFileName="QFFDU_~1.POT")) returned 1 [0174.694] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8767def0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8767def0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x8767def0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8c80, dwReserved0=0x0, dwReserved1=0x0, cFileName="QZgBMdzaEM6oXeH90ZZ.swf.Poteston", cAlternateFileName="QZGBMD~1.POT")) returned 1 [0174.694] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876a4050, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x9eee35b0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9eee35b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0174.694] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87716470, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x87716470, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9eebd450, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0174.694] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8767def0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8767def0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876a4050, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x189c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="y3LlbNlOVLYa.flv.Poteston", cAlternateFileName="Y3LLBN~1.POT")) returned 1 [0174.695] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0174.696] SetEndOfFile (hFile=0x178) returned 1 [0174.709] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdca4ffc0, ftCreationTime.dwHighDateTime=0x1d751cf, ftLastAccessTime.dwLowDateTime=0x9eee35b0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9eee35b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.710] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876a4050, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876a4050, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876ca1b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xaaf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JH7gB.avi.Poteston", cAlternateFileName="JH7GBA~1.POT")) returned 1 [0174.710] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876ca1b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x9eee35b0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9eee35b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0174.710] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8773c5d0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8773c5d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9eee35b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0174.710] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8773c5d0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8773c5d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9eee35b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 0 [0174.710] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdca4ffc0, ftCreationTime.dwHighDateTime=0x1d751cf, ftLastAccessTime.dwLowDateTime=0x9eee35b0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x9eee35b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.710] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fc694 | out: lpFindFileData=0x2fc694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876a4050, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x876a4050, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x876ca1b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xaaf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JH7gB.avi.Poteston", cAlternateFileName="JH7GBA~1.POT")) returned 1 [0174.711] SetEndOfFile (hFile=0x178) returned 1 [0174.716] SetEndOfFile (hFile=0x178) returned 1 [0174.725] SetEndOfFile (hFile=0x178) returned 1 [0174.737] SetEndOfFile (hFile=0x178) returned 1 [0174.744] SetEndOfFile (hFile=0x178) returned 1 [0174.753] SetEndOfFile (hFile=0x178) returned 1 [0174.763] SetEndOfFile (hFile=0x178) returned 1 [0174.770] SetEndOfFile (hFile=0x178) returned 1 [0174.779] SetEndOfFile (hFile=0x178) returned 1 [0174.787] SetEndOfFile (hFile=0x178) returned 1 [0174.803] SetEndOfFile (hFile=0x178) returned 1 [0174.809] SetEndOfFile (hFile=0x178) returned 1 [0174.818] SetEndOfFile (hFile=0x178) returned 1 [0174.823] SetEndOfFile (hFile=0x178) returned 1 [0174.828] SetEndOfFile (hFile=0x178) returned 1 [0174.833] SetEndOfFile (hFile=0x178) returned 1 [0174.839] SetEndOfFile (hFile=0x178) returned 1 [0174.844] SetEndOfFile (hFile=0x178) returned 1 [0174.850] SetEndOfFile (hFile=0x178) returned 1 [0174.856] SetEndOfFile (hFile=0x178) returned 1 [0174.860] SetEndOfFile (hFile=0x178) returned 1 [0174.866] SetEndOfFile (hFile=0x178) returned 1 [0174.872] SetEndOfFile (hFile=0x178) returned 1 [0174.878] SetEndOfFile (hFile=0x178) returned 1 [0174.886] SetEndOfFile (hFile=0x178) returned 1 [0174.891] SetEndOfFile (hFile=0x178) returned 1 [0174.896] SetEndOfFile (hFile=0x178) returned 1 [0174.902] SetEndOfFile (hFile=0x178) returned 1 [0174.907] SetEndOfFile (hFile=0x178) returned 1 [0174.912] SetEndOfFile (hFile=0x178) returned 1 [0174.917] SetEndOfFile (hFile=0x178) returned 1 [0174.921] SetEndOfFile (hFile=0x178) returned 1 [0174.927] SetEndOfFile (hFile=0x178) returned 1 [0174.932] SetEndOfFile (hFile=0x178) returned 1 [0174.938] SetEndOfFile (hFile=0x178) returned 1 [0174.947] SetEndOfFile (hFile=0x178) returned 1 [0174.953] SetEndOfFile (hFile=0x178) returned 1 [0174.960] SetEndOfFile (hFile=0x178) returned 1 [0174.966] SetEndOfFile (hFile=0x178) returned 1 [0174.970] SetEndOfFile (hFile=0x178) returned 1 [0174.978] SetEndOfFile (hFile=0x178) returned 1 [0174.985] SetEndOfFile (hFile=0x178) returned 1 [0174.992] SetEndOfFile (hFile=0x178) returned 1 [0174.999] SetEndOfFile (hFile=0x178) returned 1 [0175.006] SetEndOfFile (hFile=0x178) returned 1 [0175.012] SetEndOfFile (hFile=0x178) returned 1 [0175.019] SetEndOfFile (hFile=0x178) returned 1 [0175.026] SetEndOfFile (hFile=0x178) returned 1 [0175.033] SetEndOfFile (hFile=0x178) returned 1 [0175.041] SetEndOfFile (hFile=0x178) returned 1 [0175.048] SetEndOfFile (hFile=0x178) returned 1 [0175.055] SetEndOfFile (hFile=0x178) returned 1 [0175.061] SetEndOfFile (hFile=0x178) returned 1 [0175.066] SetEndOfFile (hFile=0x178) returned 1 [0175.073] SetEndOfFile (hFile=0x178) returned 1 [0175.079] SetEndOfFile (hFile=0x178) returned 1 [0175.099] SetEndOfFile (hFile=0x178) returned 1 [0175.106] SetEndOfFile (hFile=0x178) returned 1 [0175.111] SetEndOfFile (hFile=0x178) returned 1 [0175.117] SetEndOfFile (hFile=0x178) returned 1 [0175.144] SetEndOfFile (hFile=0x178) returned 1 [0175.147] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 1 [0175.148] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 0 [0175.149] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 0 [0175.151] SetEndOfFile (hFile=0x178) returned 1 [0175.153] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 1 [0175.155] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0175.156] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0175.156] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0175.157] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0175.162] SetEndOfFile (hFile=0x178) returned 1 [0175.164] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\readme.txt")) returned 1 [0175.166] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\readme.txt")) returned 0 [0175.166] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\readme.txt")) returned 0 [0175.167] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\readme.txt")) returned 0 [0175.167] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\readme.txt")) returned 0 [0175.168] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\readme.txt")) returned 0 [0175.170] SetEndOfFile (hFile=0x178) returned 1 [0175.172] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 1 [0175.174] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.175] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.175] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.175] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.176] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.177] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.179] SetEndOfFile (hFile=0x178) returned 1 [0175.182] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 1 [0175.184] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 0 [0175.184] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 0 [0175.187] SetEndOfFile (hFile=0x178) returned 1 [0175.189] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 1 [0175.191] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0175.191] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0175.194] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0175.194] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0175.198] SetEndOfFile (hFile=0x178) returned 1 [0175.200] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 1 [0175.202] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.202] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.203] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.203] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.204] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.204] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.207] SetEndOfFile (hFile=0x178) returned 1 [0175.210] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 1 [0175.211] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 0 [0175.212] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 0 [0175.218] SetEndOfFile (hFile=0x178) returned 1 [0175.220] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 1 [0175.222] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0175.223] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0175.223] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0175.224] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0175.227] SetEndOfFile (hFile=0x178) returned 1 [0175.229] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 1 [0175.231] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.231] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.232] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.232] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.233] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.233] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.236] SetEndOfFile (hFile=0x178) returned 1 [0175.238] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 1 [0175.245] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 0 [0175.245] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 0 [0175.248] SetEndOfFile (hFile=0x178) returned 1 [0175.250] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 1 [0175.252] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0175.253] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0175.253] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0175.254] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0175.257] SetEndOfFile (hFile=0x178) returned 1 [0175.259] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 1 [0175.261] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.261] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.262] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.262] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.263] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.263] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.266] SetEndOfFile (hFile=0x178) returned 1 [0175.268] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 1 [0175.270] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 0 [0175.270] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 0 [0175.273] SetEndOfFile (hFile=0x178) returned 1 [0175.275] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 1 [0175.278] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0175.278] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0175.279] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0175.279] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0175.281] SetEndOfFile (hFile=0x178) returned 1 [0175.284] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\readme.txt")) returned 1 [0175.286] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\readme.txt")) returned 0 [0175.286] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\readme.txt")) returned 0 [0175.287] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\readme.txt")) returned 0 [0175.287] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\readme.txt")) returned 0 [0175.287] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\readme.txt")) returned 0 [0175.288] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\readme.txt")) returned 0 [0175.289] SetEndOfFile (hFile=0x178) returned 1 [0175.291] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 1 [0175.293] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.293] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.294] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.294] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.295] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.295] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.298] SetEndOfFile (hFile=0x178) returned 1 [0175.300] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 1 [0175.302] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 0 [0175.303] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 0 [0175.305] SetEndOfFile (hFile=0x178) returned 1 [0175.307] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 1 [0175.309] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0175.310] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0175.310] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0175.310] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0175.314] SetEndOfFile (hFile=0x178) returned 1 [0175.316] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 1 [0175.318] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.319] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.319] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.320] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.320] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.321] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.323] SetEndOfFile (hFile=0x178) returned 1 [0175.326] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 1 [0175.328] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 0 [0175.328] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 0 [0175.331] SetEndOfFile (hFile=0x178) returned 1 [0175.334] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 1 [0175.335] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0175.336] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0175.336] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0175.337] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0175.340] SetEndOfFile (hFile=0x178) returned 1 [0175.343] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 1 [0175.345] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.345] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.346] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.346] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.347] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.347] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.350] SetEndOfFile (hFile=0x178) returned 1 [0175.352] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 1 [0175.354] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 0 [0175.354] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 0 [0175.357] SetEndOfFile (hFile=0x178) returned 1 [0175.359] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 1 [0175.361] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0175.361] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0175.362] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0175.362] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0175.369] SetEndOfFile (hFile=0x178) returned 1 [0175.372] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 1 [0175.374] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.374] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.375] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.375] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.376] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.376] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.383] SetEndOfFile (hFile=0x178) returned 1 [0175.385] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 1 [0175.387] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 0 [0175.388] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 0 [0175.390] SetEndOfFile (hFile=0x178) returned 1 [0175.392] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 1 [0175.394] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0175.394] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0175.395] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0175.395] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0175.401] SetEndOfFile (hFile=0x178) returned 1 [0175.403] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 1 [0175.405] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.406] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.406] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.407] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.407] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.408] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.411] SetEndOfFile (hFile=0x178) returned 1 [0175.413] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 1 [0175.415] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 0 [0175.415] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 0 [0175.418] SetEndOfFile (hFile=0x178) returned 1 [0175.420] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 1 [0175.422] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0175.422] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0175.423] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0175.423] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0175.427] SetEndOfFile (hFile=0x178) returned 1 [0175.428] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 1 [0175.430] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.430] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.431] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.431] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.431] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.432] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.434] SetEndOfFile (hFile=0x178) returned 1 [0175.436] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 1 [0175.438] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 0 [0175.438] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 0 [0175.441] SetEndOfFile (hFile=0x178) returned 1 [0175.443] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 1 [0175.444] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0175.445] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0175.445] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0175.446] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0175.449] SetEndOfFile (hFile=0x178) returned 1 [0175.451] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 1 [0175.453] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.453] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.454] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.454] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.454] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.455] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.459] SetEndOfFile (hFile=0x31c) returned 1 [0175.461] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 1 [0175.463] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 0 [0175.464] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 0 [0175.466] SetEndOfFile (hFile=0x31c) returned 1 [0175.468] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 1 [0175.470] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0175.471] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0175.471] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0175.471] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0175.474] SetEndOfFile (hFile=0x31c) returned 1 [0175.476] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\readme.txt")) returned 1 [0175.478] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\readme.txt")) returned 0 [0175.478] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\readme.txt")) returned 0 [0175.479] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\readme.txt")) returned 0 [0175.479] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\readme.txt")) returned 0 [0175.479] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\readme.txt")) returned 0 [0175.480] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\readme.txt")) returned 0 [0175.481] SetEndOfFile (hFile=0x31c) returned 1 [0175.484] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 1 [0175.485] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.486] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.486] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.487] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.487] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.488] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.492] SetEndOfFile (hFile=0x31c) returned 1 [0175.494] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 1 [0175.496] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 0 [0175.496] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 0 [0175.499] SetEndOfFile (hFile=0x31c) returned 1 [0175.501] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 1 [0175.503] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0175.505] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0175.506] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0175.506] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0175.509] SetEndOfFile (hFile=0x31c) returned 1 [0175.512] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 1 [0175.514] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.514] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.515] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.515] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.515] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.516] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.519] SetEndOfFile (hFile=0x31c) returned 1 [0175.521] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 1 [0175.523] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 0 [0175.523] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 0 [0175.526] SetEndOfFile (hFile=0x31c) returned 1 [0175.528] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 1 [0175.530] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0175.530] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0175.531] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0175.531] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0175.535] SetEndOfFile (hFile=0x31c) returned 1 [0175.537] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 1 [0175.539] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.539] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.540] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.540] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.540] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.541] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.544] SetEndOfFile (hFile=0x31c) returned 1 [0175.550] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 1 [0175.552] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 0 [0175.553] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 0 [0175.555] SetEndOfFile (hFile=0x31c) returned 1 [0175.558] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 1 [0175.559] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0175.560] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0175.560] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0175.561] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 0 [0175.566] SetEndOfFile (hFile=0x31c) returned 1 [0175.568] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 1 [0175.570] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.571] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.571] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.572] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.573] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.574] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt")) returned 0 [0175.578] SetEndOfFile (hFile=0x31c) returned 1 [0175.580] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 1 [0175.586] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 0 [0175.587] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt")) returned 0 [0175.589] SetEndOfFile (hFile=0x31c) returned 1 [0175.592] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt")) returned 1 [0175.598] SetEndOfFile (hFile=0x31c) returned 1 [0175.618] WriteFile (in: hFile=0x1e8, lpBuffer=0x2900ca8*, nNumberOfBytesToWrite=0x33e, lpNumberOfBytesWritten=0x2fcc0c, lpOverlapped=0x0 | out: lpBuffer=0x2900ca8*, lpNumberOfBytesWritten=0x2fcc0c*=0x33e, lpOverlapped=0x0) returned 1 [0175.621] SetEndOfFile (hFile=0x31c) returned 1 [0175.627] SetEndOfFile (hFile=0x31c) returned 1 [0175.640] SetEndOfFile (hFile=0x31c) returned 1 [0175.649] SetEndOfFile (hFile=0x31c) returned 1 [0175.655] SetEndOfFile (hFile=0x31c) returned 1 [0175.662] SetEndOfFile (hFile=0x31c) returned 1 [0175.669] SetEndOfFile (hFile=0x31c) returned 1 [0175.675] SetEndOfFile (hFile=0x31c) returned 1 [0175.681] SetEndOfFile (hFile=0x31c) returned 1 [0175.685] SetEndOfFile (hFile=0x31c) returned 1 [0175.690] SetEndOfFile (hFile=0x31c) returned 1 [0175.695] SetEndOfFile (hFile=0x31c) returned 1 [0175.700] SetEndOfFile (hFile=0x31c) returned 1 [0175.705] SetEndOfFile (hFile=0x31c) returned 1 [0175.710] SetEndOfFile (hFile=0x31c) returned 1 [0175.715] SetEndOfFile (hFile=0x31c) returned 1 [0175.719] SetEndOfFile (hFile=0x31c) returned 1 [0175.725] SetEndOfFile (hFile=0x31c) returned 1 [0175.734] SetEndOfFile (hFile=0x31c) returned 1 [0175.741] SetEndOfFile (hFile=0x31c) returned 1 [0175.746] SetEndOfFile (hFile=0x31c) returned 1 [0175.751] SetEndOfFile (hFile=0x31c) returned 1 [0175.757] SetEndOfFile (hFile=0x31c) returned 1 [0175.763] SetEndOfFile (hFile=0x31c) returned 1 [0175.768] SetEndOfFile (hFile=0x31c) returned 1 [0175.778] SetEndOfFile (hFile=0x31c) returned 1 [0175.784] SetEndOfFile (hFile=0x31c) returned 1 [0175.789] SetEndOfFile (hFile=0x31c) returned 1 [0175.797] SetEndOfFile (hFile=0x31c) returned 1 [0175.804] SetEndOfFile (hFile=0x31c) returned 1 [0175.810] SetEndOfFile (hFile=0x31c) returned 1 [0175.816] SetEndOfFile (hFile=0x31c) returned 1 [0175.822] SetEndOfFile (hFile=0x31c) returned 1 [0175.829] SetEndOfFile (hFile=0x31c) returned 1 [0175.834] SetEndOfFile (hFile=0x31c) returned 1 [0175.842] SetEndOfFile (hFile=0x31c) returned 1 [0175.848] SetEndOfFile (hFile=0x31c) returned 1 [0175.854] SetEndOfFile (hFile=0x31c) returned 1 [0175.861] SetEndOfFile (hFile=0x31c) returned 1 [0175.869] SetEndOfFile (hFile=0x31c) returned 1 [0175.875] SetEndOfFile (hFile=0x31c) returned 1 [0175.884] SetEndOfFile (hFile=0x31c) returned 1 [0175.891] SetEndOfFile (hFile=0x31c) returned 1 [0175.897] SetEndOfFile (hFile=0x31c) returned 1 [0175.904] SetEndOfFile (hFile=0x31c) returned 1 [0175.927] SetEndOfFile (hFile=0x31c) returned 1 [0175.934] SetEndOfFile (hFile=0x31c) returned 1 [0175.941] SetEndOfFile (hFile=0x31c) returned 1 [0175.948] SetEndOfFile (hFile=0x31c) returned 1 [0175.954] SetEndOfFile (hFile=0x31c) returned 1 [0175.966] SetEndOfFile (hFile=0x31c) returned 1 [0175.975] SetEndOfFile (hFile=0x31c) returned 1 [0175.984] SetEndOfFile (hFile=0x31c) returned 1 [0175.992] SetEndOfFile (hFile=0x31c) returned 1 [0175.998] SetEndOfFile (hFile=0x31c) returned 1 [0176.005] SetEndOfFile (hFile=0x31c) returned 1 [0176.012] SetEndOfFile (hFile=0x31c) returned 1 [0176.020] SetEndOfFile (hFile=0x31c) returned 1 [0176.027] SetEndOfFile (hFile=0x31c) returned 1 [0176.033] SetEndOfFile (hFile=0x31c) returned 1 [0176.040] SetEndOfFile (hFile=0x31c) returned 1 [0176.047] SetEndOfFile (hFile=0x31c) returned 1 [0176.053] SetEndOfFile (hFile=0x31c) returned 1 [0176.062] SetEndOfFile (hFile=0x31c) returned 1 [0176.070] SetEndOfFile (hFile=0x31c) returned 1 [0176.076] SetEndOfFile (hFile=0x31c) returned 1 [0176.101] SetEndOfFile (hFile=0x31c) returned 1 [0176.108] SetEndOfFile (hFile=0x31c) returned 1 [0176.114] SetEndOfFile (hFile=0x31c) returned 1 [0176.121] SetEndOfFile (hFile=0x31c) returned 1 [0176.128] SetEndOfFile (hFile=0x31c) returned 1 [0176.134] SetEndOfFile (hFile=0x31c) returned 1 [0176.143] SetEndOfFile (hFile=0x31c) returned 1 [0176.150] SetEndOfFile (hFile=0x31c) returned 1 [0176.156] SetEndOfFile (hFile=0x31c) returned 1 [0176.163] SetEndOfFile (hFile=0x31c) returned 1 [0176.173] SetEndOfFile (hFile=0x31c) returned 1 [0176.180] SetEndOfFile (hFile=0x31c) returned 1 [0176.186] SetEndOfFile (hFile=0x31c) returned 1 [0176.197] SetEndOfFile (hFile=0x31c) returned 1 [0176.204] SetEndOfFile (hFile=0x31c) returned 1 [0176.210] SetEndOfFile (hFile=0x31c) returned 1 [0176.218] SetEndOfFile (hFile=0x31c) returned 1 [0176.226] SetEndOfFile (hFile=0x31c) returned 1 [0176.232] SetEndOfFile (hFile=0x31c) returned 1 [0176.240] SetEndOfFile (hFile=0x31c) returned 1 [0176.246] SetEndOfFile (hFile=0x31c) returned 1 [0176.253] SetEndOfFile (hFile=0x31c) returned 1 [0176.259] SetEndOfFile (hFile=0x31c) returned 1 [0176.266] SetEndOfFile (hFile=0x31c) returned 1 [0176.274] SetEndOfFile (hFile=0x31c) returned 1 [0176.280] SetEndOfFile (hFile=0x31c) returned 1 [0176.287] SetEndOfFile (hFile=0x31c) returned 1 [0176.294] SetEndOfFile (hFile=0x31c) returned 1 [0176.301] SetEndOfFile (hFile=0x31c) returned 1 [0176.308] SetEndOfFile (hFile=0x31c) returned 1 [0176.315] SetEndOfFile (hFile=0x31c) returned 1 [0176.322] SetEndOfFile (hFile=0x31c) returned 1 [0176.328] SetEndOfFile (hFile=0x31c) returned 1 [0176.334] SetEndOfFile (hFile=0x31c) returned 1 [0176.341] SetEndOfFile (hFile=0x31c) returned 1 [0176.348] SetEndOfFile (hFile=0x31c) returned 1 [0176.370] SetEndOfFile (hFile=0x31c) returned 1 [0176.377] SetEndOfFile (hFile=0x31c) returned 1 [0176.384] SetEndOfFile (hFile=0x31c) returned 1 [0176.395] SetEndOfFile (hFile=0x31c) returned 1 [0176.402] SetEndOfFile (hFile=0x31c) returned 1 [0176.409] SetEndOfFile (hFile=0x31c) returned 1 [0176.418] SetEndOfFile (hFile=0x31c) returned 1 [0176.425] SetEndOfFile (hFile=0x31c) returned 1 [0176.431] SetEndOfFile (hFile=0x31c) returned 1 [0176.438] SetEndOfFile (hFile=0x31c) returned 1 [0176.447] SetEndOfFile (hFile=0x31c) returned 1 [0176.454] SetEndOfFile (hFile=0x31c) returned 1 [0176.461] SetEndOfFile (hFile=0x31c) returned 1 [0176.469] SetEndOfFile (hFile=0x31c) returned 1 [0176.475] SetEndOfFile (hFile=0x31c) returned 1 [0176.483] SetEndOfFile (hFile=0x31c) returned 1 [0176.496] SetEndOfFile (hFile=0x31c) returned 1 [0176.502] SetEndOfFile (hFile=0x31c) returned 1 [0176.508] SetEndOfFile (hFile=0x31c) returned 1 [0176.514] SetEndOfFile (hFile=0x31c) returned 1 [0176.521] SetEndOfFile (hFile=0x31c) returned 1 [0176.527] SetEndOfFile (hFile=0x31c) returned 1 [0176.535] SetEndOfFile (hFile=0x31c) returned 1 [0176.542] SetEndOfFile (hFile=0x31c) returned 1 [0176.548] SetEndOfFile (hFile=0x31c) returned 1 [0176.563] SetEndOfFile (hFile=0x31c) returned 1 [0176.571] SetEndOfFile (hFile=0x31c) returned 1 [0176.577] SetEndOfFile (hFile=0x31c) returned 1 [0176.590] SetEndOfFile (hFile=0x31c) returned 1 [0176.596] SetEndOfFile (hFile=0x31c) returned 1 [0176.602] SetEndOfFile (hFile=0x31c) returned 1 [0176.610] SetEndOfFile (hFile=0x31c) returned 1 [0176.616] SetEndOfFile (hFile=0x31c) returned 1 [0176.634] SetEndOfFile (hFile=0x31c) returned 1 [0176.641] SetEndOfFile (hFile=0x31c) returned 1 [0176.647] SetEndOfFile (hFile=0x31c) returned 1 [0176.653] SetEndOfFile (hFile=0x31c) returned 1 [0176.660] SetEndOfFile (hFile=0x31c) returned 1 [0176.667] SetEndOfFile (hFile=0x31c) returned 1 [0176.673] SetEndOfFile (hFile=0x31c) returned 1 [0176.679] SetEndOfFile (hFile=0x31c) returned 1 [0176.685] SetEndOfFile (hFile=0x31c) returned 1 [0176.692] SetEndOfFile (hFile=0x31c) returned 1 [0176.698] SetEndOfFile (hFile=0x31c) returned 1 [0176.706] SetEndOfFile (hFile=0x31c) returned 1 [0176.713] SetEndOfFile (hFile=0x31c) returned 1 [0176.720] SetEndOfFile (hFile=0x31c) returned 1 [0176.729] SetEndOfFile (hFile=0x31c) returned 1 [0176.736] SetEndOfFile (hFile=0x31c) returned 1 [0176.742] SetEndOfFile (hFile=0x31c) returned 1 [0176.761] SetEndOfFile (hFile=0x31c) returned 1 [0176.768] SetEndOfFile (hFile=0x31c) returned 1 [0176.774] SetEndOfFile (hFile=0x31c) returned 1 [0176.784] SetEndOfFile (hFile=0x31c) returned 1 [0176.792] SetEndOfFile (hFile=0x31c) returned 1 [0176.798] SetEndOfFile (hFile=0x31c) returned 1 [0176.806] SetEndOfFile (hFile=0x31c) returned 1 [0176.812] SetEndOfFile (hFile=0x31c) returned 1 [0176.822] SetEndOfFile (hFile=0x31c) returned 1 [0176.829] SetEndOfFile (hFile=0x31c) returned 1 [0176.837] SetEndOfFile (hFile=0x31c) returned 1 [0176.844] SetEndOfFile (hFile=0x31c) returned 1 [0176.851] SetEndOfFile (hFile=0x31c) returned 1 [0176.857] SetEndOfFile (hFile=0x31c) returned 1 [0176.864] SetEndOfFile (hFile=0x31c) returned 1 [0176.870] SetEndOfFile (hFile=0x31c) returned 1 [0176.878] SetEndOfFile (hFile=0x31c) returned 1 [0176.885] SetEndOfFile (hFile=0x31c) returned 1 [0176.892] SetEndOfFile (hFile=0x31c) returned 1 [0176.899] SetEndOfFile (hFile=0x31c) returned 1 [0176.907] SetEndOfFile (hFile=0x31c) returned 1 [0176.913] SetEndOfFile (hFile=0x31c) returned 1 [0176.923] SetEndOfFile (hFile=0x31c) returned 1 [0176.930] SetEndOfFile (hFile=0x31c) returned 1 [0176.936] SetEndOfFile (hFile=0x31c) returned 1 [0176.952] SetEndOfFile (hFile=0x31c) returned 1 [0176.959] SetEndOfFile (hFile=0x31c) returned 1 [0176.966] SetEndOfFile (hFile=0x31c) returned 1 [0177.132] SetEndOfFile (hFile=0x31c) returned 1 [0177.139] SetEndOfFile (hFile=0x31c) returned 1 [0177.146] SetEndOfFile (hFile=0x31c) returned 1 [0177.153] SetEndOfFile (hFile=0x31c) returned 1 [0177.160] SetEndOfFile (hFile=0x31c) returned 1 [0177.166] SetEndOfFile (hFile=0x31c) returned 1 [0177.172] SetEndOfFile (hFile=0x31c) returned 1 [0177.201] SetEndOfFile (hFile=0x31c) returned 1 [0177.208] SetEndOfFile (hFile=0x31c) returned 1 [0177.214] SetEndOfFile (hFile=0x31c) returned 1 [0177.222] SetEndOfFile (hFile=0x31c) returned 1 [0177.229] SetEndOfFile (hFile=0x31c) returned 1 [0177.235] SetEndOfFile (hFile=0x31c) returned 1 [0177.242] SetEndOfFile (hFile=0x31c) returned 1 [0177.249] SetEndOfFile (hFile=0x31c) returned 1 [0177.255] SetEndOfFile (hFile=0x31c) returned 1 [0177.268] SetEndOfFile (hFile=0x31c) returned 1 [0177.275] SetEndOfFile (hFile=0x31c) returned 1 [0177.282] SetEndOfFile (hFile=0x31c) returned 1 [0177.290] SetEndOfFile (hFile=0x31c) returned 1 [0177.296] SetEndOfFile (hFile=0x31c) returned 1 [0177.304] SetEndOfFile (hFile=0x31c) returned 1 [0177.316] SetEndOfFile (hFile=0x31c) returned 1 [0177.322] SetEndOfFile (hFile=0x31c) returned 1 [0177.329] SetEndOfFile (hFile=0x31c) returned 1 [0177.337] SetEndOfFile (hFile=0x31c) returned 1 [0177.346] SetEndOfFile (hFile=0x31c) returned 1 [0177.352] SetEndOfFile (hFile=0x31c) returned 1 [0177.357] SetEndOfFile (hFile=0x31c) returned 1 [0177.363] SetEndOfFile (hFile=0x31c) returned 1 [0177.370] SetEndOfFile (hFile=0x31c) returned 1 [0177.376] SetEndOfFile (hFile=0x31c) returned 1 [0177.383] SetEndOfFile (hFile=0x31c) returned 1 [0177.390] SetEndOfFile (hFile=0x31c) returned 1 [0177.395] SetEndOfFile (hFile=0x31c) returned 1 [0177.402] SetEndOfFile (hFile=0x31c) returned 1 [0177.411] SetEndOfFile (hFile=0x31c) returned 1 [0177.417] SetEndOfFile (hFile=0x31c) returned 1 [0177.425] SetEndOfFile (hFile=0x31c) returned 1 [0177.430] SetEndOfFile (hFile=0x31c) returned 1 [0177.437] SetEndOfFile (hFile=0x31c) returned 1 [0177.442] SetEndOfFile (hFile=0x31c) returned 1 [0177.449] SetEndOfFile (hFile=0x31c) returned 1 [0177.456] SetEndOfFile (hFile=0x31c) returned 1 [0177.462] SetEndOfFile (hFile=0x31c) returned 1 [0177.469] SetEndOfFile (hFile=0x31c) returned 1 [0177.476] SetEndOfFile (hFile=0x31c) returned 1 [0177.482] SetEndOfFile (hFile=0x31c) returned 1 [0177.493] SetEndOfFile (hFile=0x31c) returned 1 [0177.500] SetEndOfFile (hFile=0x31c) returned 1 [0177.506] SetEndOfFile (hFile=0x31c) returned 1 [0177.512] SetEndOfFile (hFile=0x31c) returned 1 [0177.520] SetEndOfFile (hFile=0x31c) returned 1 [0177.527] SetEndOfFile (hFile=0x31c) returned 1 [0177.533] SetEndOfFile (hFile=0x31c) returned 1 [0177.540] SetEndOfFile (hFile=0x31c) returned 1 [0177.547] SetEndOfFile (hFile=0x31c) returned 1 [0177.555] SetEndOfFile (hFile=0x31c) returned 1 [0177.562] SetEndOfFile (hFile=0x31c) returned 1 [0177.568] SetEndOfFile (hFile=0x31c) returned 1 [0177.574] SetEndOfFile (hFile=0x31c) returned 1 [0177.583] SetEndOfFile (hFile=0x31c) returned 1 [0177.590] SetEndOfFile (hFile=0x31c) returned 1 [0177.597] SetEndOfFile (hFile=0x31c) returned 1 [0177.604] SetEndOfFile (hFile=0x31c) returned 1 [0177.611] SetEndOfFile (hFile=0x31c) returned 1 [0177.616] SetEndOfFile (hFile=0x31c) returned 1 [0177.623] SetEndOfFile (hFile=0x31c) returned 1 [0177.630] SetEndOfFile (hFile=0x31c) returned 1 [0177.636] SetEndOfFile (hFile=0x31c) returned 1 [0177.655] SetEndOfFile (hFile=0x31c) returned 1 [0177.662] SetEndOfFile (hFile=0x31c) returned 1 [0177.669] SetEndOfFile (hFile=0x31c) returned 1 [0177.675] SetEndOfFile (hFile=0x31c) returned 1 [0177.685] SetEndOfFile (hFile=0x31c) returned 1 [0177.692] SetEndOfFile (hFile=0x31c) returned 1 [0177.698] SetEndOfFile (hFile=0x31c) returned 1 [0177.706] SetEndOfFile (hFile=0x31c) returned 1 [0177.714] SetEndOfFile (hFile=0x31c) returned 1 [0177.721] SetEndOfFile (hFile=0x31c) returned 1 [0177.728] SetEndOfFile (hFile=0x31c) returned 1 [0177.734] SetEndOfFile (hFile=0x31c) returned 1 [0177.740] SetEndOfFile (hFile=0x31c) returned 1 [0177.749] SetEndOfFile (hFile=0x31c) returned 1 [0177.756] SetEndOfFile (hFile=0x31c) returned 1 [0177.762] SetEndOfFile (hFile=0x31c) returned 1 [0177.768] SetEndOfFile (hFile=0x31c) returned 1 [0177.775] SetEndOfFile (hFile=0x31c) returned 1 [0177.781] SetEndOfFile (hFile=0x31c) returned 1 [0177.790] SetEndOfFile (hFile=0x31c) returned 1 [0177.796] SetEndOfFile (hFile=0x31c) returned 1 [0177.802] SetEndOfFile (hFile=0x31c) returned 1 [0177.809] SetEndOfFile (hFile=0x31c) returned 1 [0177.816] SetEndOfFile (hFile=0x31c) returned 1 [0177.822] SetEndOfFile (hFile=0x31c) returned 1 [0177.828] SetEndOfFile (hFile=0x31c) returned 1 [0177.834] SetEndOfFile (hFile=0x31c) returned 1 [0177.840] SetEndOfFile (hFile=0x31c) returned 1 [0177.846] SetEndOfFile (hFile=0x31c) returned 1 [0177.853] SetEndOfFile (hFile=0x31c) returned 1 [0177.868] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0177.868] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0177.869] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0177.869] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0177.870] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0177.870] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0177.871] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0177.871] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0177.872] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0177.872] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0177.874] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fc684, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0177.874] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1e8 [0177.890] WriteFile (in: hFile=0x1e8, lpBuffer=0x2937b08*, nNumberOfBytesToWrite=0x33e, lpNumberOfBytesWritten=0x2fcc0c, lpOverlapped=0x0 | out: lpBuffer=0x2937b08*, lpNumberOfBytesWritten=0x2fcc0c*=0x33e, lpOverlapped=0x0) returned 1 [0177.892] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\*", lpFindFileData=0x2fc68c | out: lpFindFileData=0x2fc68c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdca4ffc0, ftCreationTime.dwHighDateTime=0x1d751cf, ftLastAccessTime.dwLowDateTime=0xa0d3ce30, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0xa0d3ce30, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3caa80 [0177.893] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\*", lpFindFileData=0x2fc68c | out: lpFindFileData=0x2fc68c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdca4ffc0, ftCreationTime.dwHighDateTime=0x1d751cf, ftLastAccessTime.dwLowDateTime=0xa0d3ce30, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0xa0d3ce30, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3caa80 [0177.893] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", lpFilePart=0x0) returned 0x70 [0177.894] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1e8 [0177.894] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt.Poteston", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt.Poteston", lpFilePart=0x0) returned 0x79 [0177.895] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt.Poteston" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x31c [0177.895] SetEndOfFile (hFile=0x31c) returned 1 [0177.896] WriteFile (in: hFile=0x31c, lpBuffer=0x293e174*, nNumberOfBytesToWrite=0x340, lpNumberOfBytesWritten=0x2fc234, lpOverlapped=0x0 | out: lpBuffer=0x293e174*, lpNumberOfBytesWritten=0x2fc234*=0x340, lpOverlapped=0x0) returned 1 [0177.899] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", lpFilePart=0x0) returned 0x70 [0177.899] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0177.900] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", lpFilePart=0x0) returned 0x70 [0177.900] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0177.901] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fc684, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", lpFilePart=0x0) returned 0x70 [0177.901] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1e8 [0177.902] WriteFile (in: hFile=0x1e8, lpBuffer=0x294528c*, nNumberOfBytesToWrite=0x33e, lpNumberOfBytesWritten=0x2fcc0c, lpOverlapped=0x0 | out: lpBuffer=0x294528c*, lpNumberOfBytesWritten=0x2fcc0c*=0x33e, lpOverlapped=0x0) returned 1 [0177.904] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\*", lpFindFileData=0x2fc68c | out: lpFindFileData=0x2fc68c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe45bb30, ftCreationTime.dwHighDateTime=0x1d75a0b, ftLastAccessTime.dwLowDateTime=0xa0d3ce30, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0xa0d3ce30, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3caa80 [0177.905] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\*", lpFindFileData=0x2fc68c | out: lpFindFileData=0x2fc68c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe45bb30, ftCreationTime.dwHighDateTime=0x1d75a0b, ftLastAccessTime.dwLowDateTime=0xa0d3ce30, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0xa0d3ce30, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3caa80 [0177.906] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", lpFilePart=0x0) returned 0x78 [0177.907] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1e8 [0177.907] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt.Poteston", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt.Poteston", lpFilePart=0x0) returned 0x81 [0177.907] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt.Poteston" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x31c [0177.907] SetEndOfFile (hFile=0x31c) returned 1 [0177.909] WriteFile (in: hFile=0x31c, lpBuffer=0x294d988*, nNumberOfBytesToWrite=0x340, lpNumberOfBytesWritten=0x2fc234, lpOverlapped=0x0 | out: lpBuffer=0x294d988*, lpNumberOfBytesWritten=0x2fc234*=0x340, lpOverlapped=0x0) returned 1 [0177.912] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", lpFilePart=0x0) returned 0x78 [0177.912] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0177.913] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", lpFilePart=0x0) returned 0x78 [0177.913] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0177.914] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", lpFilePart=0x0) returned 0x78 [0177.914] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0177.915] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", lpFilePart=0x0) returned 0x78 [0177.915] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0177.916] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fc684, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", lpFilePart=0x0) returned 0x78 [0177.917] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1e8 [0177.917] WriteFile (in: hFile=0x1e8, lpBuffer=0x2958594*, nNumberOfBytesToWrite=0x33e, lpNumberOfBytesWritten=0x2fcc0c, lpOverlapped=0x0 | out: lpBuffer=0x2958594*, lpNumberOfBytesWritten=0x2fcc0c*=0x33e, lpOverlapped=0x0) returned 1 [0177.920] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\*", lpFindFileData=0x2fc68c | out: lpFindFileData=0x2fc68c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347857c0, ftCreationTime.dwHighDateTime=0x1d75bb1, ftLastAccessTime.dwLowDateTime=0xa0d62f90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0xa0d62f90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3caa80 [0177.921] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\*", lpFindFileData=0x2fc68c | out: lpFindFileData=0x2fc68c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347857c0, ftCreationTime.dwHighDateTime=0x1d75bb1, ftLastAccessTime.dwLowDateTime=0xa0d62f90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0xa0d62f90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3caa80 [0177.923] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0177.924] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1e8 [0177.924] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt.Poteston", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt.Poteston", lpFilePart=0x0) returned 0x82 [0177.924] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt.Poteston" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x31c [0177.925] SetEndOfFile (hFile=0x31c) returned 1 [0177.935] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0177.936] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0177.936] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0177.937] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0177.937] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fc3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0177.937] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0177.938] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0177.938] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0177.939] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0177.939] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0177.940] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0177.940] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0177.940] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0177.942] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fc684, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0177.942] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1e8 [0177.943] WriteFile (in: hFile=0x1e8, lpBuffer=0x2974fe0*, nNumberOfBytesToWrite=0x33e, lpNumberOfBytesWritten=0x2fcc0c, lpOverlapped=0x0 | out: lpBuffer=0x2974fe0*, lpNumberOfBytesWritten=0x2fcc0c*=0x33e, lpOverlapped=0x0) returned 1 [0177.948] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\*", lpFindFileData=0x2fc68c | out: lpFindFileData=0x2fc68c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdca4ffc0, ftCreationTime.dwHighDateTime=0x1d751cf, ftLastAccessTime.dwLowDateTime=0xa0daf250, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0xa0daf250, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3caa80 [0177.949] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\*", lpFindFileData=0x2fc68c | out: lpFindFileData=0x2fc68c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdca4ffc0, ftCreationTime.dwHighDateTime=0x1d751cf, ftLastAccessTime.dwLowDateTime=0xa0daf250, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0xa0daf250, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3caa80 [0177.949] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", lpFilePart=0x0) returned 0x70 [0177.950] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1e8 [0177.950] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt.Poteston", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt.Poteston", lpFilePart=0x0) returned 0x79 [0177.950] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt.Poteston" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x31c [0177.950] SetEndOfFile (hFile=0x31c) returned 1 [0177.954] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", lpFilePart=0x0) returned 0x70 [0177.955] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0177.955] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", lpFilePart=0x0) returned 0x70 [0177.956] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0177.957] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fc684, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", lpFilePart=0x0) returned 0x70 [0177.957] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1e8 [0177.958] WriteFile (in: hFile=0x1e8, lpBuffer=0x2982770*, nNumberOfBytesToWrite=0x33e, lpNumberOfBytesWritten=0x2fcc0c, lpOverlapped=0x0 | out: lpBuffer=0x2982770*, lpNumberOfBytesWritten=0x2fcc0c*=0x33e, lpOverlapped=0x0) returned 1 [0177.960] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\*", lpFindFileData=0x2fc68c | out: lpFindFileData=0x2fc68c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe45bb30, ftCreationTime.dwHighDateTime=0x1d75a0b, ftLastAccessTime.dwLowDateTime=0xa0dd53b0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0xa0dd53b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3caa80 [0177.961] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\*", lpFindFileData=0x2fc68c | out: lpFindFileData=0x2fc68c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe45bb30, ftCreationTime.dwHighDateTime=0x1d75a0b, ftLastAccessTime.dwLowDateTime=0xa0dd53b0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0xa0dd53b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3caa80 [0177.962] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", lpFilePart=0x0) returned 0x78 [0177.962] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1e8 [0177.963] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt.Poteston", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt.Poteston", lpFilePart=0x0) returned 0x81 [0177.963] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt.Poteston" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x31c [0177.963] SetEndOfFile (hFile=0x31c) returned 1 [0177.967] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", lpFilePart=0x0) returned 0x78 [0177.967] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0177.968] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", lpFilePart=0x0) returned 0x78 [0177.968] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0177.969] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", lpFilePart=0x0) returned 0x78 [0177.970] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0177.970] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", lpFilePart=0x0) returned 0x78 [0177.971] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0177.972] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fc684, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", lpFilePart=0x0) returned 0x78 [0177.972] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1e8 [0177.973] WriteFile (in: hFile=0x1e8, lpBuffer=0x2995a78*, nNumberOfBytesToWrite=0x33e, lpNumberOfBytesWritten=0x2fcc0c, lpOverlapped=0x0 | out: lpBuffer=0x2995a78*, lpNumberOfBytesWritten=0x2fcc0c*=0x33e, lpOverlapped=0x0) returned 1 [0177.975] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fcbc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\readme.txt", lpFilePart=0x0) returned 0x69 [0177.975] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1e8 [0177.976] WriteFile (in: hFile=0x1e8, lpBuffer=0x299a138*, nNumberOfBytesToWrite=0x33e, lpNumberOfBytesWritten=0x2fd148, lpOverlapped=0x0 | out: lpBuffer=0x299a138*, lpNumberOfBytesWritten=0x2fd148*=0x33e, lpOverlapped=0x0) returned 1 [0177.978] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fd0fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\readme.txt", lpFilePart=0x0) returned 0x56 [0177.978] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1e8 [0177.979] WriteFile (in: hFile=0x1e8, lpBuffer=0x299e7b0*, nNumberOfBytesToWrite=0x33e, lpNumberOfBytesWritten=0x2fd684, lpOverlapped=0x0 | out: lpBuffer=0x299e7b0*, lpNumberOfBytesWritten=0x2fd684*=0x33e, lpOverlapped=0x0) returned 1 [0177.980] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fcc84, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\readme.txt", lpFilePart=0x0) returned 0x49 [0177.981] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1e8 [0177.981] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\readme.txt.Poteston", nBufferLength=0x105, lpBuffer=0x2fcc84, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\readme.txt.Poteston", lpFilePart=0x0) returned 0x52 [0177.981] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\readme.txt.Poteston" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\readme.txt.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x31c [0177.981] SetEndOfFile (hFile=0x31c) returned 1 [0177.983] WriteFile (in: hFile=0x31c, lpBuffer=0x29a1c38*, nNumberOfBytesToWrite=0x340, lpNumberOfBytesWritten=0x2fd1e8, lpOverlapped=0x0 | out: lpBuffer=0x29a1c38*, lpNumberOfBytesWritten=0x2fd1e8*=0x340, lpOverlapped=0x0) returned 1 [0177.986] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fcc84, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\readme.txt", lpFilePart=0x0) returned 0x49 [0177.986] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0177.987] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fcc84, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\readme.txt", lpFilePart=0x0) returned 0x49 [0177.987] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0177.988] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fcc84, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\readme.txt", lpFilePart=0x0) returned 0x49 [0177.988] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0177.989] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\*", lpFindFileData=0x2fd104 | out: lpFindFileData=0x2fd104*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0d31320, ftCreationTime.dwHighDateTime=0x1d758a0, ftLastAccessTime.dwLowDateTime=0xa0e6d930, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0xa0e6d930, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3caa80 [0177.990] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\*", lpFindFileData=0x2fd104 | out: lpFindFileData=0x2fd104*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0d31320, ftCreationTime.dwHighDateTime=0x1d758a0, ftLastAccessTime.dwLowDateTime=0xa0e6d930, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0xa0e6d930, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3caa80 [0177.991] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\*", lpFindFileData=0x2fcbc8 | out: lpFindFileData=0x2fcbc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36628860, ftCreationTime.dwHighDateTime=0x1d7550a, ftLastAccessTime.dwLowDateTime=0xa0e6d930, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0xa0e6d930, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3caa80 [0177.992] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\*", lpFindFileData=0x2fcbc8 | out: lpFindFileData=0x2fcbc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36628860, ftCreationTime.dwHighDateTime=0x1d7550a, ftLastAccessTime.dwLowDateTime=0xa0e6d930, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0xa0e6d930, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3caa80 [0177.994] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\*", lpFindFileData=0x2fc68c | out: lpFindFileData=0x2fc68c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347857c0, ftCreationTime.dwHighDateTime=0x1d75bb1, ftLastAccessTime.dwLowDateTime=0xa0e21670, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0xa0e21670, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3caa80 [0177.994] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\*", lpFindFileData=0x2fc68c | out: lpFindFileData=0x2fc68c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347857c0, ftCreationTime.dwHighDateTime=0x1d75bb1, ftLastAccessTime.dwLowDateTime=0xa0e21670, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0xa0e21670, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3caa80 [0177.996] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0177.996] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1e8 [0177.997] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt.Poteston", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt.Poteston", lpFilePart=0x0) returned 0x82 [0177.997] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt.Poteston" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x31c [0177.997] SetEndOfFile (hFile=0x31c) returned 1 [0178.000] WriteFile (in: hFile=0x31c, lpBuffer=0x29ba048*, nNumberOfBytesToWrite=0x340, lpNumberOfBytesWritten=0x2fc234, lpOverlapped=0x0 | out: lpBuffer=0x29ba048*, lpNumberOfBytesWritten=0x2fc234*=0x340, lpOverlapped=0x0) returned 1 [0178.003] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0178.003] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0178.004] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0178.004] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0178.005] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0178.005] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0178.006] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0178.006] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0178.007] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0178.007] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0178.007] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0178.008] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0178.010] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fc684, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt", lpFilePart=0x0) returned 0x79 [0178.010] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\2fdvyf8scprkrtu\\readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1e8 [0178.011] WriteFile (in: hFile=0x1e8, lpBuffer=0x29c7a4c*, nNumberOfBytesToWrite=0x33e, lpNumberOfBytesWritten=0x2fcc0c, lpOverlapped=0x0 | out: lpBuffer=0x29c7a4c*, lpNumberOfBytesWritten=0x2fcc0c*=0x33e, lpOverlapped=0x0) returned 1 [0178.013] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\*", lpFindFileData=0x2fc68c | out: lpFindFileData=0x2fc68c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdca4ffc0, ftCreationTime.dwHighDateTime=0x1d751cf, ftLastAccessTime.dwLowDateTime=0xa0e477d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0xa0e477d0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3caa80 [0178.014] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\*", lpFindFileData=0x2fc68c | out: lpFindFileData=0x2fc68c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdca4ffc0, ftCreationTime.dwHighDateTime=0x1d751cf, ftLastAccessTime.dwLowDateTime=0xa0e477d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0xa0e477d0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3caa80 [0178.014] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", lpFilePart=0x0) returned 0x70 [0178.015] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1e8 [0178.015] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt.Poteston", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt.Poteston", lpFilePart=0x0) returned 0x79 [0178.017] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt.Poteston" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x31c [0178.017] SetEndOfFile (hFile=0x31c) returned 1 [0178.018] WriteFile (in: hFile=0x31c, lpBuffer=0x29ce0b8*, nNumberOfBytesToWrite=0x340, lpNumberOfBytesWritten=0x2fc234, lpOverlapped=0x0 | out: lpBuffer=0x29ce0b8*, lpNumberOfBytesWritten=0x2fc234*=0x340, lpOverlapped=0x0) returned 1 [0178.021] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", lpFilePart=0x0) returned 0x70 [0178.021] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0178.022] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", lpFilePart=0x0) returned 0x70 [0178.022] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0178.023] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fc684, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt", lpFilePart=0x0) returned 0x70 [0178.023] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\ajlEoh\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\ajleoh\\readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1e8 [0178.024] WriteFile (in: hFile=0x1e8, lpBuffer=0x29d51d0*, nNumberOfBytesToWrite=0x33e, lpNumberOfBytesWritten=0x2fcc0c, lpOverlapped=0x0 | out: lpBuffer=0x29d51d0*, lpNumberOfBytesWritten=0x2fcc0c*=0x33e, lpOverlapped=0x0) returned 1 [0178.026] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\*", lpFindFileData=0x2fc68c | out: lpFindFileData=0x2fc68c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe45bb30, ftCreationTime.dwHighDateTime=0x1d75a0b, ftLastAccessTime.dwLowDateTime=0xa0e6d930, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0xa0e6d930, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3caa80 [0178.027] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\*", lpFindFileData=0x2fc68c | out: lpFindFileData=0x2fc68c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe45bb30, ftCreationTime.dwHighDateTime=0x1d75a0b, ftLastAccessTime.dwLowDateTime=0xa0e6d930, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0xa0e6d930, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3caa80 [0178.028] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", nBufferLength=0x105, lpBuffer=0x2fbcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt", lpFilePart=0x0) returned 0x78 [0178.028] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\MP8Ghk7Dv AjRZ\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\videos\\nxzobazgvcnev3ce gd-\\b5gepjbp9eykzev\\-1dvuhiu_x6y\\lvrtiqeax zdkeixkd\\mp8ghk7dv ajrz\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1e8 [0178.029] SetEndOfFile (hFile=0x31c) returned 1 [0178.036] SetEndOfFile (hFile=0x31c) returned 1 [0178.042] SetEndOfFile (hFile=0x31c) returned 1 [0178.048] SetEndOfFile (hFile=0x31c) returned 1 [0178.055] SetEndOfFile (hFile=0x31c) returned 1 [0178.062] SetEndOfFile (hFile=0x31c) returned 1 [0178.068] SetEndOfFile (hFile=0x31c) returned 1 [0178.075] SetEndOfFile (hFile=0x31c) returned 1 [0178.115] SetEndOfFile (hFile=0x31c) returned 1 [0178.121] SetEndOfFile (hFile=0x31c) returned 1 [0178.130] SetEndOfFile (hFile=0x31c) returned 1 [0178.136] SetEndOfFile (hFile=0x31c) returned 1 [0178.143] SetEndOfFile (hFile=0x31c) returned 1 [0178.149] SetEndOfFile (hFile=0x31c) returned 1 [0178.156] SetEndOfFile (hFile=0x31c) returned 1 [0178.163] SetEndOfFile (hFile=0x31c) returned 1 [0178.168] SetEndOfFile (hFile=0x31c) returned 1 [0178.180] SetEndOfFile (hFile=0x31c) returned 1 [0178.186] SetEndOfFile (hFile=0x31c) returned 1 [0178.193] SetEndOfFile (hFile=0x31c) returned 1 [0178.204] SetEndOfFile (hFile=0x31c) returned 1 [0178.211] SetEndOfFile (hFile=0x31c) returned 1 [0178.217] SetEndOfFile (hFile=0x31c) returned 1 [0178.224] SetEndOfFile (hFile=0x31c) returned 1 [0178.231] SetEndOfFile (hFile=0x31c) returned 1 [0178.238] SetEndOfFile (hFile=0x31c) returned 1 [0178.246] SetEndOfFile (hFile=0x31c) returned 1 [0178.253] SetEndOfFile (hFile=0x31c) returned 1 [0178.259] SetEndOfFile (hFile=0x31c) returned 1 [0178.266] SetEndOfFile (hFile=0x31c) returned 1 [0178.273] SetEndOfFile (hFile=0x31c) returned 1 [0178.278] SetEndOfFile (hFile=0x31c) returned 1 [0178.284] SetEndOfFile (hFile=0x31c) returned 1 [0178.290] SetEndOfFile (hFile=0x31c) returned 1 [0178.297] SetEndOfFile (hFile=0x31c) returned 1 [0178.303] SetEndOfFile (hFile=0x31c) returned 1 [0178.310] SetEndOfFile (hFile=0x31c) returned 1 [0178.316] SetEndOfFile (hFile=0x31c) returned 1 [0178.322] SetEndOfFile (hFile=0x31c) returned 1 [0178.329] SetEndOfFile (hFile=0x31c) returned 1 [0178.336] SetEndOfFile (hFile=0x31c) returned 1 [0178.342] SetEndOfFile (hFile=0x31c) returned 1 [0178.357] SetEndOfFile (hFile=0x31c) returned 1 [0178.364] SetEndOfFile (hFile=0x31c) returned 1 [0178.370] SetEndOfFile (hFile=0x31c) returned 1 [0178.378] SetEndOfFile (hFile=0x31c) returned 1 [0178.388] SetEndOfFile (hFile=0x31c) returned 1 [0178.394] SetEndOfFile (hFile=0x31c) returned 1 [0178.401] SetEndOfFile (hFile=0x31c) returned 1 [0178.408] SetEndOfFile (hFile=0x31c) returned 1 [0178.414] SetEndOfFile (hFile=0x31c) returned 1 [0178.421] SetEndOfFile (hFile=0x31c) returned 1 [0178.428] SetEndOfFile (hFile=0x31c) returned 1 [0178.434] SetEndOfFile (hFile=0x31c) returned 1 [0178.440] SetEndOfFile (hFile=0x31c) returned 1 [0178.445] SetEndOfFile (hFile=0x31c) returned 1 [0178.452] SetEndOfFile (hFile=0x31c) returned 1 [0178.459] SetEndOfFile (hFile=0x31c) returned 1 [0178.466] SetEndOfFile (hFile=0x31c) returned 1 [0178.473] SetEndOfFile (hFile=0x31c) returned 1 [0178.479] SetEndOfFile (hFile=0x31c) returned 1 [0178.487] SetEndOfFile (hFile=0x31c) returned 1 [0178.494] SetEndOfFile (hFile=0x31c) returned 1 [0178.501] SetEndOfFile (hFile=0x31c) returned 1 [0178.509] SetEndOfFile (hFile=0x31c) returned 1 [0178.515] SetEndOfFile (hFile=0x31c) returned 1 [0178.522] SetEndOfFile (hFile=0x31c) returned 1 [0178.528] SetEndOfFile (hFile=0x31c) returned 1 [0178.540] SetEndOfFile (hFile=0x31c) returned 1 [0178.547] SetEndOfFile (hFile=0x31c) returned 1 [0178.553] SetEndOfFile (hFile=0x31c) returned 1 [0178.560] SetEndOfFile (hFile=0x31c) returned 1 [0178.569] SetEndOfFile (hFile=0x31c) returned 1 [0178.575] SetEndOfFile (hFile=0x31c) returned 1 [0178.582] SetEndOfFile (hFile=0x31c) returned 1 [0178.590] SetEndOfFile (hFile=0x31c) returned 1 [0178.595] SetEndOfFile (hFile=0x31c) returned 1 [0178.601] SetEndOfFile (hFile=0x31c) returned 1 [0178.607] SetEndOfFile (hFile=0x31c) returned 1 [0178.614] SetEndOfFile (hFile=0x31c) returned 1 [0178.620] SetEndOfFile (hFile=0x31c) returned 1 [0178.627] SetEndOfFile (hFile=0x31c) returned 1 [0178.634] SetEndOfFile (hFile=0x31c) returned 1 [0178.640] SetEndOfFile (hFile=0x31c) returned 1 [0178.647] SetEndOfFile (hFile=0x31c) returned 1 [0178.666] SetEndOfFile (hFile=0x31c) returned 1 [0178.672] SetEndOfFile (hFile=0x31c) returned 1 [0178.681] SetEndOfFile (hFile=0x31c) returned 1 [0178.689] SetEndOfFile (hFile=0x31c) returned 1 [0178.695] SetEndOfFile (hFile=0x31c) returned 1 [0178.702] SetEndOfFile (hFile=0x31c) returned 1 [0178.709] SetEndOfFile (hFile=0x31c) returned 1 [0178.715] SetEndOfFile (hFile=0x31c) returned 1 [0178.723] SetEndOfFile (hFile=0x31c) returned 1 [0178.734] SetEndOfFile (hFile=0x31c) returned 1 [0178.740] SetEndOfFile (hFile=0x31c) returned 1 [0178.748] SetEndOfFile (hFile=0x31c) returned 1 [0178.755] SetEndOfFile (hFile=0x31c) returned 1 [0178.763] SetEndOfFile (hFile=0x31c) returned 1 [0178.769] SetEndOfFile (hFile=0x31c) returned 1 [0178.775] SetEndOfFile (hFile=0x31c) returned 1 [0178.782] SetEndOfFile (hFile=0x31c) returned 1 [0178.788] SetEndOfFile (hFile=0x31c) returned 1 [0178.795] SetEndOfFile (hFile=0x31c) returned 1 [0178.803] SetEndOfFile (hFile=0x31c) returned 1 [0178.809] SetEndOfFile (hFile=0x31c) returned 1 [0178.816] SetEndOfFile (hFile=0x31c) returned 1 [0178.823] SetEndOfFile (hFile=0x31c) returned 1 [0178.829] SetEndOfFile (hFile=0x31c) returned 1 [0178.838] SetEndOfFile (hFile=0x31c) returned 1 [0178.847] SetEndOfFile (hFile=0x31c) returned 1 [0178.853] SetEndOfFile (hFile=0x31c) returned 1 [0178.861] SetEndOfFile (hFile=0x31c) returned 1 [0178.867] SetEndOfFile (hFile=0x31c) returned 1 [0178.875] SetEndOfFile (hFile=0x31c) returned 1 [0178.883] SetEndOfFile (hFile=0x31c) returned 1 [0178.890] SetEndOfFile (hFile=0x31c) returned 1 [0178.896] SetEndOfFile (hFile=0x31c) returned 1 [0178.903] SetEndOfFile (hFile=0x31c) returned 1 [0178.916] SetEndOfFile (hFile=0x31c) returned 1 [0178.923] SetEndOfFile (hFile=0x31c) returned 1 [0178.929] SetEndOfFile (hFile=0x31c) returned 1 [0178.934] SetEndOfFile (hFile=0x31c) returned 1 [0178.941] SetEndOfFile (hFile=0x31c) returned 1 [0178.950] SetEndOfFile (hFile=0x31c) returned 1 [0178.958] SetEndOfFile (hFile=0x31c) returned 1 [0178.965] SetEndOfFile (hFile=0x31c) returned 1 [0178.971] SetEndOfFile (hFile=0x31c) returned 1 [0178.978] SetEndOfFile (hFile=0x31c) returned 1 [0178.985] SetEndOfFile (hFile=0x31c) returned 1 [0178.991] SetEndOfFile (hFile=0x31c) returned 1 [0179.002] SetEndOfFile (hFile=0x31c) returned 1 [0179.009] SetEndOfFile (hFile=0x31c) returned 1 [0179.015] SetEndOfFile (hFile=0x31c) returned 1 [0179.022] SetEndOfFile (hFile=0x31c) returned 1 [0179.029] SetEndOfFile (hFile=0x31c) returned 1 [0179.037] SetEndOfFile (hFile=0x31c) returned 1 [0179.044] SetEndOfFile (hFile=0x31c) returned 1 [0179.051] SetEndOfFile (hFile=0x31c) returned 1 [0179.057] SetEndOfFile (hFile=0x31c) returned 1 [0179.064] SetEndOfFile (hFile=0x31c) returned 1 [0179.071] SetEndOfFile (hFile=0x31c) returned 1 [0179.089] SetEndOfFile (hFile=0x31c) returned 1 [0179.096] SetEndOfFile (hFile=0x31c) returned 1 [0179.109] SetEndOfFile (hFile=0x31c) returned 1 [0179.116] SetEndOfFile (hFile=0x31c) returned 1 [0179.122] SetEndOfFile (hFile=0x31c) returned 1 [0179.129] SetEndOfFile (hFile=0x31c) returned 1 [0179.136] SetEndOfFile (hFile=0x31c) returned 1 [0179.144] SetEndOfFile (hFile=0x31c) returned 1 [0179.151] SetEndOfFile (hFile=0x31c) returned 1 [0179.158] SetEndOfFile (hFile=0x31c) returned 1 [0179.171] SetEndOfFile (hFile=0x31c) returned 1 [0179.180] SetEndOfFile (hFile=0x31c) returned 1 [0179.187] SetEndOfFile (hFile=0x31c) returned 1 [0179.193] SetEndOfFile (hFile=0x31c) returned 1 [0179.199] SetEndOfFile (hFile=0x31c) returned 1 [0179.207] SetEndOfFile (hFile=0x31c) returned 1 [0179.213] SetEndOfFile (hFile=0x31c) returned 1 [0179.248] SetEndOfFile (hFile=0x31c) returned 1 [0179.255] SetEndOfFile (hFile=0x31c) returned 1 [0179.261] SetEndOfFile (hFile=0x31c) returned 1 [0179.277] SetEndOfFile (hFile=0x31c) returned 1 [0179.283] SetEndOfFile (hFile=0x31c) returned 1 [0179.289] SetEndOfFile (hFile=0x31c) returned 1 [0179.309] SetEndOfFile (hFile=0x31c) returned 1 [0179.325] SetEndOfFile (hFile=0x31c) returned 1 [0179.339] SetEndOfFile (hFile=0x31c) returned 1 [0179.347] SetEndOfFile (hFile=0x31c) returned 1 [0179.371] SetEndOfFile (hFile=0x31c) returned 1 [0179.403] SetEndOfFile (hFile=0x31c) returned 1 [0179.410] SetEndOfFile (hFile=0x31c) returned 1 [0179.417] SetEndOfFile (hFile=0x31c) returned 1 [0179.424] SetEndOfFile (hFile=0x31c) returned 1 [0179.432] SetEndOfFile (hFile=0x31c) returned 1 [0179.452] SetEndOfFile (hFile=0x31c) returned 1 [0179.460] SetEndOfFile (hFile=0x31c) returned 1 [0179.466] SetEndOfFile (hFile=0x31c) returned 1 [0179.495] SetEndOfFile (hFile=0x31c) returned 1 [0179.522] SetEndOfFile (hFile=0x31c) returned 1 [0179.532] SetEndOfFile (hFile=0x31c) returned 1 [0179.539] SetEndOfFile (hFile=0x31c) returned 1 [0179.549] SetEndOfFile (hFile=0x31c) returned 1 [0179.555] SetEndOfFile (hFile=0x31c) returned 1 [0179.563] SetEndOfFile (hFile=0x31c) returned 1 [0179.570] SetEndOfFile (hFile=0x31c) returned 1 [0179.579] SetEndOfFile (hFile=0x31c) returned 1 [0179.585] SetEndOfFile (hFile=0x31c) returned 1 [0179.591] SetEndOfFile (hFile=0x31c) returned 1 [0179.600] SetEndOfFile (hFile=0x31c) returned 1 [0179.606] SetEndOfFile (hFile=0x31c) returned 1 [0179.614] SetEndOfFile (hFile=0x31c) returned 1 [0179.620] SetEndOfFile (hFile=0x31c) returned 1 [0179.630] SetEndOfFile (hFile=0x31c) returned 1 [0179.637] SetEndOfFile (hFile=0x31c) returned 1 [0179.649] SetEndOfFile (hFile=0x31c) returned 1 [0179.655] SetEndOfFile (hFile=0x31c) returned 1 [0179.663] SetEndOfFile (hFile=0x31c) returned 1 [0179.670] SetEndOfFile (hFile=0x31c) returned 1 [0179.697] SetEndOfFile (hFile=0x31c) returned 1 [0179.707] SetEndOfFile (hFile=0x31c) returned 1 [0179.715] SetEndOfFile (hFile=0x31c) returned 1 [0179.723] SetEndOfFile (hFile=0x31c) returned 1 [0179.730] SetEndOfFile (hFile=0x31c) returned 1 [0179.739] SetEndOfFile (hFile=0x31c) returned 1 [0179.745] SetEndOfFile (hFile=0x31c) returned 1 [0179.753] SetEndOfFile (hFile=0x31c) returned 1 [0179.761] SetEndOfFile (hFile=0x31c) returned 1 [0179.769] SetEndOfFile (hFile=0x31c) returned 1 [0179.775] SetEndOfFile (hFile=0x31c) returned 1 [0179.780] SetEndOfFile (hFile=0x31c) returned 1 [0179.784] SetEndOfFile (hFile=0x31c) returned 1 [0179.789] SetEndOfFile (hFile=0x31c) returned 1 [0179.795] SetEndOfFile (hFile=0x31c) returned 1 [0179.801] SetEndOfFile (hFile=0x31c) returned 1 [0179.808] SetEndOfFile (hFile=0x31c) returned 1 [0179.815] SetEndOfFile (hFile=0x31c) returned 1 [0179.822] SetEndOfFile (hFile=0x31c) returned 1 [0179.830] SetEndOfFile (hFile=0x31c) returned 1 [0179.837] SetEndOfFile (hFile=0x31c) returned 1 [0179.849] SetEndOfFile (hFile=0x31c) returned 1 [0179.855] SetEndOfFile (hFile=0x31c) returned 1 [0179.860] SetEndOfFile (hFile=0x31c) returned 1 [0179.867] SetEndOfFile (hFile=0x31c) returned 1 [0179.873] SetEndOfFile (hFile=0x31c) returned 1 [0179.883] SetEndOfFile (hFile=0x31c) returned 1 [0179.888] SetEndOfFile (hFile=0x31c) returned 1 [0179.894] SetEndOfFile (hFile=0x31c) returned 1 [0179.900] SetEndOfFile (hFile=0x31c) returned 1 [0179.925] SetEndOfFile (hFile=0x31c) returned 1 [0179.931] SetEndOfFile (hFile=0x31c) returned 1 [0179.937] SetEndOfFile (hFile=0x31c) returned 1 [0179.943] SetEndOfFile (hFile=0x31c) returned 1 [0179.948] SetEndOfFile (hFile=0x31c) returned 1 [0179.956] SetEndOfFile (hFile=0x31c) returned 1 [0179.961] SetEndOfFile (hFile=0x31c) returned 1 [0179.968] SetEndOfFile (hFile=0x31c) returned 1 [0179.974] SetEndOfFile (hFile=0x31c) returned 1 [0179.979] SetEndOfFile (hFile=0x31c) returned 1 [0179.985] SetEndOfFile (hFile=0x31c) returned 1 [0179.991] SetEndOfFile (hFile=0x31c) returned 1 [0179.996] SetEndOfFile (hFile=0x31c) returned 1 [0180.004] SetEndOfFile (hFile=0x31c) returned 1 [0180.009] SetEndOfFile (hFile=0x31c) returned 1 [0180.014] SetEndOfFile (hFile=0x31c) returned 1 [0180.020] SetEndOfFile (hFile=0x31c) returned 1 [0180.028] SetEndOfFile (hFile=0x31c) returned 1 [0180.032] SetEndOfFile (hFile=0x31c) returned 1 [0180.038] SetEndOfFile (hFile=0x31c) returned 1 [0180.042] SetEndOfFile (hFile=0x31c) returned 1 [0180.049] SetEndOfFile (hFile=0x31c) returned 1 [0180.057] SetEndOfFile (hFile=0x31c) returned 1 [0180.062] SetEndOfFile (hFile=0x31c) returned 1 [0180.066] SetEndOfFile (hFile=0x31c) returned 1 [0180.071] SetEndOfFile (hFile=0x31c) returned 1 [0180.093] SetEndOfFile (hFile=0x31c) returned 1 [0180.098] SetEndOfFile (hFile=0x31c) returned 1 [0180.103] SetEndOfFile (hFile=0x31c) returned 1 [0180.109] SetEndOfFile (hFile=0x31c) returned 1 [0180.114] SetEndOfFile (hFile=0x31c) returned 1 [0180.119] SetEndOfFile (hFile=0x31c) returned 1 [0180.124] SetEndOfFile (hFile=0x31c) returned 1 [0180.129] SetEndOfFile (hFile=0x31c) returned 1 [0180.134] SetEndOfFile (hFile=0x31c) returned 1 [0180.142] SetEndOfFile (hFile=0x31c) returned 1 [0180.148] SetEndOfFile (hFile=0x31c) returned 1 [0180.154] SetEndOfFile (hFile=0x31c) returned 1 [0180.159] SetEndOfFile (hFile=0x31c) returned 1 [0180.164] SetEndOfFile (hFile=0x31c) returned 1 [0180.170] SetEndOfFile (hFile=0x31c) returned 1 [0180.174] SetEndOfFile (hFile=0x31c) returned 1 [0180.374] SetEndOfFile (hFile=0x31c) returned 1 [0180.379] SetEndOfFile (hFile=0x31c) returned 1 [0180.384] SetEndOfFile (hFile=0x31c) returned 1 [0180.389] SetEndOfFile (hFile=0x31c) returned 1 [0180.394] SetEndOfFile (hFile=0x31c) returned 1 [0180.400] SetEndOfFile (hFile=0x31c) returned 1 [0180.406] SetEndOfFile (hFile=0x31c) returned 1 [0180.410] SetEndOfFile (hFile=0x31c) returned 1 [0180.415] SetEndOfFile (hFile=0x31c) returned 1 [0180.419] SetEndOfFile (hFile=0x31c) returned 1 [0180.425] SetEndOfFile (hFile=0x31c) returned 1 [0180.430] SetEndOfFile (hFile=0x31c) returned 1 [0180.434] SetEndOfFile (hFile=0x31c) returned 1 [0180.439] SetEndOfFile (hFile=0x31c) returned 1 [0180.445] SetEndOfFile (hFile=0x31c) returned 1 [0180.450] SetEndOfFile (hFile=0x31c) returned 1 [0180.457] SetEndOfFile (hFile=0x31c) returned 1 [0180.462] SetEndOfFile (hFile=0x31c) returned 1 [0180.466] SetEndOfFile (hFile=0x31c) returned 1 [0180.472] SetEndOfFile (hFile=0x31c) returned 1 [0180.476] SetEndOfFile (hFile=0x31c) returned 1 [0180.482] SetEndOfFile (hFile=0x31c) returned 1 [0180.487] SetEndOfFile (hFile=0x31c) returned 1 [0180.492] SetEndOfFile (hFile=0x31c) returned 1 [0180.497] SetEndOfFile (hFile=0x31c) returned 1 [0180.506] SetEndOfFile (hFile=0x31c) returned 1 [0180.511] SetEndOfFile (hFile=0x31c) returned 1 [0180.516] SetEndOfFile (hFile=0x31c) returned 1 [0180.521] SetEndOfFile (hFile=0x31c) returned 1 [0180.525] SetEndOfFile (hFile=0x31c) returned 1 [0180.531] SetEndOfFile (hFile=0x31c) returned 1 [0180.537] SetEndOfFile (hFile=0x31c) returned 1 [0180.543] SetEndOfFile (hFile=0x31c) returned 1 [0180.550] SetEndOfFile (hFile=0x31c) returned 1 [0180.555] SetEndOfFile (hFile=0x31c) returned 1 [0180.563] SetEndOfFile (hFile=0x31c) returned 1 [0180.570] SetEndOfFile (hFile=0x31c) returned 1 [0180.575] SetEndOfFile (hFile=0x31c) returned 1 [0180.581] SetEndOfFile (hFile=0x31c) returned 1 [0180.586] SetEndOfFile (hFile=0x31c) returned 1 [0180.591] SetEndOfFile (hFile=0x31c) returned 1 [0180.596] SetEndOfFile (hFile=0x31c) returned 1 [0180.601] SetEndOfFile (hFile=0x31c) returned 1 [0180.610] SetEndOfFile (hFile=0x31c) returned 1 [0180.615] SetEndOfFile (hFile=0x31c) returned 1 [0180.620] SetEndOfFile (hFile=0x31c) returned 1 [0180.625] SetEndOfFile (hFile=0x31c) returned 1 [0180.631] SetEndOfFile (hFile=0x31c) returned 1 [0180.637] SetEndOfFile (hFile=0x31c) returned 1 [0180.641] SetEndOfFile (hFile=0x31c) returned 1 [0180.647] SetEndOfFile (hFile=0x31c) returned 1 [0180.654] SetEndOfFile (hFile=0x31c) returned 1 [0180.659] SetEndOfFile (hFile=0x31c) returned 1 [0180.665] SetEndOfFile (hFile=0x31c) returned 1 [0180.671] SetEndOfFile (hFile=0x31c) returned 1 [0180.678] SetEndOfFile (hFile=0x31c) returned 1 [0180.692] SetEndOfFile (hFile=0x31c) returned 1 [0180.698] SetEndOfFile (hFile=0x31c) returned 1 [0180.703] SetEndOfFile (hFile=0x31c) returned 1 [0180.709] SetEndOfFile (hFile=0x31c) returned 1 [0180.717] SetEndOfFile (hFile=0x31c) returned 1 [0180.721] SetEndOfFile (hFile=0x31c) returned 1 [0180.726] SetEndOfFile (hFile=0x31c) returned 1 [0180.731] SetEndOfFile (hFile=0x31c) returned 1 [0180.737] SetEndOfFile (hFile=0x31c) returned 1 [0180.742] SetEndOfFile (hFile=0x31c) returned 1 [0180.746] SetEndOfFile (hFile=0x31c) returned 1 [0180.752] SetEndOfFile (hFile=0x31c) returned 1 [0180.758] SetEndOfFile (hFile=0x31c) returned 1 [0180.765] SetEndOfFile (hFile=0x31c) returned 1 [0180.773] SetEndOfFile (hFile=0x31c) returned 1 [0180.780] SetEndOfFile (hFile=0x31c) returned 1 [0180.784] SetEndOfFile (hFile=0x31c) returned 1 [0180.789] SetEndOfFile (hFile=0x31c) returned 1 [0180.794] SetEndOfFile (hFile=0x31c) returned 1 [0180.804] SetEndOfFile (hFile=0x31c) returned 1 [0180.809] SetEndOfFile (hFile=0x31c) returned 1 [0180.818] SetEndOfFile (hFile=0x31c) returned 1 [0180.824] SetEndOfFile (hFile=0x31c) returned 1 [0180.829] SetEndOfFile (hFile=0x31c) returned 1 [0180.834] SetEndOfFile (hFile=0x31c) returned 1 [0180.841] SetEndOfFile (hFile=0x31c) returned 1 [0180.847] SetEndOfFile (hFile=0x31c) returned 1 [0180.854] SetEndOfFile (hFile=0x31c) returned 1 [0180.860] SetEndOfFile (hFile=0x31c) returned 1 [0180.865] SetEndOfFile (hFile=0x31c) returned 1 [0180.871] SetEndOfFile (hFile=0x31c) returned 1 [0180.876] SetEndOfFile (hFile=0x31c) returned 1 [0180.880] SetEndOfFile (hFile=0x31c) returned 1 [0180.886] SetEndOfFile (hFile=0x31c) returned 1 [0180.891] SetEndOfFile (hFile=0x31c) returned 1 [0180.896] SetEndOfFile (hFile=0x31c) returned 1 [0180.901] SetEndOfFile (hFile=0x31c) returned 1 [0180.907] SetEndOfFile (hFile=0x31c) returned 1 [0180.912] SetEndOfFile (hFile=0x31c) returned 1 [0180.916] SetEndOfFile (hFile=0x31c) returned 1 [0180.922] SetEndOfFile (hFile=0x31c) returned 1 [0180.928] SetEndOfFile (hFile=0x31c) returned 1 [0180.935] SetEndOfFile (hFile=0x31c) returned 1 [0180.942] SetEndOfFile (hFile=0x31c) returned 1 [0180.949] SetEndOfFile (hFile=0x31c) returned 1 [0180.954] SetEndOfFile (hFile=0x31c) returned 1 [0180.966] SetEndOfFile (hFile=0x31c) returned 1 [0180.972] SetEndOfFile (hFile=0x31c) returned 1 [0180.978] SetEndOfFile (hFile=0x31c) returned 1 [0180.989] SetEndOfFile (hFile=0x31c) returned 1 [0180.995] SetEndOfFile (hFile=0x31c) returned 1 [0181.003] SetEndOfFile (hFile=0x31c) returned 1 [0181.010] SetEndOfFile (hFile=0x31c) returned 1 [0181.016] SetEndOfFile (hFile=0x31c) returned 1 [0181.022] SetEndOfFile (hFile=0x31c) returned 1 [0181.029] SetEndOfFile (hFile=0x31c) returned 1 [0181.036] SetEndOfFile (hFile=0x31c) returned 1 [0181.042] SetEndOfFile (hFile=0x31c) returned 1 [0181.048] SetEndOfFile (hFile=0x31c) returned 1 [0181.055] SetEndOfFile (hFile=0x31c) returned 1 [0181.061] SetEndOfFile (hFile=0x31c) returned 1 [0181.066] SetEndOfFile (hFile=0x31c) returned 1 [0181.072] SetEndOfFile (hFile=0x31c) returned 1 [0181.094] SetEndOfFile (hFile=0x31c) returned 1 [0181.100] SetEndOfFile (hFile=0x31c) returned 1 [0181.108] SetEndOfFile (hFile=0x31c) returned 1 [0181.114] SetEndOfFile (hFile=0x31c) returned 1 [0181.120] SetEndOfFile (hFile=0x31c) returned 1 [0181.127] SetEndOfFile (hFile=0x31c) returned 1 [0181.134] SetEndOfFile (hFile=0x31c) returned 1 [0181.140] SetEndOfFile (hFile=0x31c) returned 1 [0181.155] SetEndOfFile (hFile=0x31c) returned 1 [0181.162] SetEndOfFile (hFile=0x31c) returned 1 [0181.168] SetEndOfFile (hFile=0x31c) returned 1 [0181.175] SetEndOfFile (hFile=0x31c) returned 1 [0181.182] SetEndOfFile (hFile=0x31c) returned 1 [0181.190] SetEndOfFile (hFile=0x31c) returned 1 [0181.199] SetEndOfFile (hFile=0x31c) returned 1 [0181.206] SetEndOfFile (hFile=0x31c) returned 1 [0181.212] SetEndOfFile (hFile=0x31c) returned 1 [0181.220] SetEndOfFile (hFile=0x31c) returned 1 [0181.227] SetEndOfFile (hFile=0x31c) returned 1 [0181.233] SetEndOfFile (hFile=0x31c) returned 1 [0181.238] SetEndOfFile (hFile=0x31c) returned 1 [0181.243] SetEndOfFile (hFile=0x31c) returned 1 [0181.248] SetEndOfFile (hFile=0x31c) returned 1 [0181.253] SetEndOfFile (hFile=0x31c) returned 1 [0181.258] SetEndOfFile (hFile=0x31c) returned 1 [0181.264] SetEndOfFile (hFile=0x31c) returned 1 [0181.268] SetEndOfFile (hFile=0x31c) returned 1 [0181.274] SetEndOfFile (hFile=0x31c) returned 1 [0181.279] SetEndOfFile (hFile=0x31c) returned 1 [0181.283] SetEndOfFile (hFile=0x31c) returned 1 [0181.290] SetEndOfFile (hFile=0x31c) returned 1 [0181.295] SetEndOfFile (hFile=0x31c) returned 1 [0181.300] SetEndOfFile (hFile=0x31c) returned 1 [0181.307] WriteFile (in: hFile=0x1e8, lpBuffer=0x2976dc8*, nNumberOfBytesToWrite=0x33e, lpNumberOfBytesWritten=0x2fcc0c, lpOverlapped=0x0 | out: lpBuffer=0x2976dc8*, lpNumberOfBytesWritten=0x2fcc0c*=0x33e, lpOverlapped=0x0) returned 1 [0181.310] SetEndOfFile (hFile=0x31c) returned 1 [0181.315] SetEndOfFile (hFile=0x31c) returned 1 [0181.320] SetEndOfFile (hFile=0x31c) returned 1 [0181.325] SetEndOfFile (hFile=0x31c) returned 1 [0181.330] SetEndOfFile (hFile=0x31c) returned 1 [0181.334] SetEndOfFile (hFile=0x31c) returned 1 [0181.343] SetEndOfFile (hFile=0x31c) returned 1 [0181.348] SetEndOfFile (hFile=0x31c) returned 1 [0181.352] SetEndOfFile (hFile=0x31c) returned 1 [0181.357] SetEndOfFile (hFile=0x31c) returned 1 [0181.361] SetEndOfFile (hFile=0x31c) returned 1 [0181.366] SetEndOfFile (hFile=0x31c) returned 1 [0181.371] SetEndOfFile (hFile=0x31c) returned 1 [0181.376] SetEndOfFile (hFile=0x31c) returned 1 [0181.381] SetEndOfFile (hFile=0x31c) returned 1 [0181.386] SetEndOfFile (hFile=0x31c) returned 1 [0181.391] SetEndOfFile (hFile=0x31c) returned 1 [0181.396] SetEndOfFile (hFile=0x31c) returned 1 [0181.401] SetEndOfFile (hFile=0x31c) returned 1 [0181.408] SetEndOfFile (hFile=0x31c) returned 1 [0181.413] SetEndOfFile (hFile=0x31c) returned 1 [0181.417] SetEndOfFile (hFile=0x31c) returned 1 [0181.423] SetEndOfFile (hFile=0x31c) returned 1 [0181.428] SetEndOfFile (hFile=0x31c) returned 1 [0181.433] SetEndOfFile (hFile=0x31c) returned 1 [0181.441] SetEndOfFile (hFile=0x31c) returned 1 [0181.447] SetEndOfFile (hFile=0x31c) returned 1 [0181.451] SetEndOfFile (hFile=0x31c) returned 1 [0181.457] SetEndOfFile (hFile=0x31c) returned 1 [0181.462] SetEndOfFile (hFile=0x31c) returned 1 [0181.468] SetEndOfFile (hFile=0x31c) returned 1 [0181.473] SetEndOfFile (hFile=0x31c) returned 1 [0181.479] SetEndOfFile (hFile=0x31c) returned 1 [0181.485] SetEndOfFile (hFile=0x31c) returned 1 [0181.490] SetEndOfFile (hFile=0x31c) returned 1 [0181.495] SetEndOfFile (hFile=0x31c) returned 1 [0181.500] SetEndOfFile (hFile=0x31c) returned 1 [0181.505] SetEndOfFile (hFile=0x31c) returned 1 [0181.510] SetEndOfFile (hFile=0x31c) returned 1 [0181.516] SetEndOfFile (hFile=0x31c) returned 1 [0181.520] SetEndOfFile (hFile=0x31c) returned 1 [0181.526] SetEndOfFile (hFile=0x31c) returned 1 [0181.530] SetEndOfFile (hFile=0x31c) returned 1 [0181.536] SetEndOfFile (hFile=0x31c) returned 1 [0181.540] SetEndOfFile (hFile=0x31c) returned 1 [0181.546] SetEndOfFile (hFile=0x31c) returned 1 [0181.551] SetEndOfFile (hFile=0x31c) returned 1 [0181.556] SetEndOfFile (hFile=0x31c) returned 1 [0181.561] SetEndOfFile (hFile=0x31c) returned 1 [0181.566] SetEndOfFile (hFile=0x31c) returned 1 [0181.571] SetEndOfFile (hFile=0x31c) returned 1 [0181.579] SetEndOfFile (hFile=0x31c) returned 1 [0181.584] SetEndOfFile (hFile=0x31c) returned 1 [0181.591] SetEndOfFile (hFile=0x31c) returned 1 [0181.596] SetEndOfFile (hFile=0x31c) returned 1 [0181.600] SetEndOfFile (hFile=0x31c) returned 1 [0181.605] SetEndOfFile (hFile=0x31c) returned 1 [0181.609] SetEndOfFile (hFile=0x31c) returned 1 [0181.616] SetEndOfFile (hFile=0x31c) returned 1 [0181.621] SetEndOfFile (hFile=0x31c) returned 1 [0181.626] SetEndOfFile (hFile=0x31c) returned 1 [0181.632] SetEndOfFile (hFile=0x31c) returned 1 [0181.638] SetEndOfFile (hFile=0x31c) returned 1 [0181.642] SetEndOfFile (hFile=0x31c) returned 1 [0181.652] SetEndOfFile (hFile=0x31c) returned 1 [0181.657] SetEndOfFile (hFile=0x31c) returned 1 [0181.662] SetEndOfFile (hFile=0x31c) returned 1 [0181.668] SetEndOfFile (hFile=0x31c) returned 1 [0181.673] SetEndOfFile (hFile=0x31c) returned 1 [0181.677] SetEndOfFile (hFile=0x31c) returned 1 [0181.690] SetEndOfFile (hFile=0x31c) returned 1 [0181.696] SetEndOfFile (hFile=0x31c) returned 1 [0181.701] SetEndOfFile (hFile=0x31c) returned 1 [0181.708] SetEndOfFile (hFile=0x31c) returned 1 [0181.714] SetEndOfFile (hFile=0x31c) returned 1 [0181.719] SetEndOfFile (hFile=0x31c) returned 1 [0181.724] SetEndOfFile (hFile=0x31c) returned 1 [0181.731] SetEndOfFile (hFile=0x31c) returned 1 [0181.737] SetEndOfFile (hFile=0x31c) returned 1 [0181.741] SetEndOfFile (hFile=0x31c) returned 1 [0181.747] SetEndOfFile (hFile=0x31c) returned 1 [0181.752] SetEndOfFile (hFile=0x31c) returned 1 [0181.757] SetEndOfFile (hFile=0x31c) returned 1 [0181.763] SetEndOfFile (hFile=0x31c) returned 1 [0181.770] SetEndOfFile (hFile=0x31c) returned 1 [0181.776] SetEndOfFile (hFile=0x31c) returned 1 [0181.783] SetEndOfFile (hFile=0x31c) returned 1 [0181.788] SetEndOfFile (hFile=0x31c) returned 1 [0181.793] SetEndOfFile (hFile=0x31c) returned 1 [0181.799] SetEndOfFile (hFile=0x31c) returned 1 [0181.804] SetEndOfFile (hFile=0x31c) returned 1 [0181.809] SetEndOfFile (hFile=0x31c) returned 1 [0181.815] SetEndOfFile (hFile=0x31c) returned 1 [0181.820] SetEndOfFile (hFile=0x31c) returned 1 [0181.825] SetEndOfFile (hFile=0x31c) returned 1 [0181.831] SetEndOfFile (hFile=0x31c) returned 1 [0181.836] SetEndOfFile (hFile=0x31c) returned 1 [0181.840] SetEndOfFile (hFile=0x31c) returned 1 [0181.846] SetEndOfFile (hFile=0x31c) returned 1 [0181.850] SetEndOfFile (hFile=0x31c) returned 1 [0181.857] SetEndOfFile (hFile=0x31c) returned 1 [0181.861] SetEndOfFile (hFile=0x31c) returned 1 [0181.870] SetEndOfFile (hFile=0x31c) returned 1 [0181.877] SetEndOfFile (hFile=0x31c) returned 1 [0181.881] SetEndOfFile (hFile=0x31c) returned 1 [0181.888] SetEndOfFile (hFile=0x31c) returned 1 [0181.893] SetEndOfFile (hFile=0x31c) returned 1 [0181.898] SetEndOfFile (hFile=0x31c) returned 1 [0181.917] SetEndOfFile (hFile=0x31c) returned 1 [0181.925] SetEndOfFile (hFile=0x31c) returned 1 [0181.930] SetEndOfFile (hFile=0x31c) returned 1 [0181.935] SetEndOfFile (hFile=0x31c) returned 1 [0181.940] SetEndOfFile (hFile=0x31c) returned 1 [0181.946] SetEndOfFile (hFile=0x31c) returned 1 [0181.951] SetEndOfFile (hFile=0x31c) returned 1 [0181.957] SetEndOfFile (hFile=0x31c) returned 1 [0181.962] SetEndOfFile (hFile=0x31c) returned 1 [0181.967] SetEndOfFile (hFile=0x31c) returned 1 [0181.973] SetEndOfFile (hFile=0x31c) returned 1 [0181.981] SetEndOfFile (hFile=0x31c) returned 1 [0181.987] SetEndOfFile (hFile=0x31c) returned 1 [0181.993] SetEndOfFile (hFile=0x31c) returned 1 [0181.998] SetEndOfFile (hFile=0x31c) returned 1 [0182.003] SetEndOfFile (hFile=0x31c) returned 1 [0182.008] SetEndOfFile (hFile=0x31c) returned 1 [0182.014] SetEndOfFile (hFile=0x31c) returned 1 [0182.019] SetEndOfFile (hFile=0x31c) returned 1 [0182.024] SetEndOfFile (hFile=0x31c) returned 1 [0182.032] SetEndOfFile (hFile=0x31c) returned 1 [0182.039] SetEndOfFile (hFile=0x31c) returned 1 [0182.044] SetEndOfFile (hFile=0x31c) returned 1 [0182.051] SetEndOfFile (hFile=0x31c) returned 1 [0182.057] SetEndOfFile (hFile=0x31c) returned 1 [0182.061] SetEndOfFile (hFile=0x31c) returned 1 [0182.067] SetEndOfFile (hFile=0x31c) returned 1 [0182.086] SetEndOfFile (hFile=0x31c) returned 1 [0182.092] SetEndOfFile (hFile=0x31c) returned 1 [0182.098] SetEndOfFile (hFile=0x31c) returned 1 [0182.104] SetEndOfFile (hFile=0x31c) returned 1 [0182.110] SetEndOfFile (hFile=0x31c) returned 1 [0182.115] SetEndOfFile (hFile=0x31c) returned 1 [0182.121] SetEndOfFile (hFile=0x31c) returned 1 [0182.126] SetEndOfFile (hFile=0x31c) returned 1 [0182.132] SetEndOfFile (hFile=0x31c) returned 1 [0182.149] SetEndOfFile (hFile=0x31c) returned 1 [0182.154] SetEndOfFile (hFile=0x31c) returned 1 [0182.159] SetEndOfFile (hFile=0x31c) returned 1 [0182.165] SetEndOfFile (hFile=0x31c) returned 1 [0182.173] SetEndOfFile (hFile=0x31c) returned 1 [0182.179] SetEndOfFile (hFile=0x31c) returned 1 [0182.187] SetEndOfFile (hFile=0x31c) returned 1 [0182.193] SetEndOfFile (hFile=0x31c) returned 1 [0182.199] SetEndOfFile (hFile=0x31c) returned 1 [0182.213] SetEndOfFile (hFile=0x31c) returned 1 [0182.219] SetEndOfFile (hFile=0x31c) returned 1 [0182.225] SetEndOfFile (hFile=0x31c) returned 1 [0182.235] SetEndOfFile (hFile=0x31c) returned 1 [0182.240] SetEndOfFile (hFile=0x31c) returned 1 [0182.246] SetEndOfFile (hFile=0x31c) returned 1 [0182.253] SetEndOfFile (hFile=0x31c) returned 1 [0182.261] SetEndOfFile (hFile=0x31c) returned 1 [0182.267] SetEndOfFile (hFile=0x31c) returned 1 [0182.275] SetEndOfFile (hFile=0x31c) returned 1 [0182.281] SetEndOfFile (hFile=0x31c) returned 1 [0182.287] SetEndOfFile (hFile=0x31c) returned 1 [0182.293] SetEndOfFile (hFile=0x31c) returned 1 [0182.299] SetEndOfFile (hFile=0x31c) returned 1 [0182.305] SetEndOfFile (hFile=0x31c) returned 1 [0182.311] SetEndOfFile (hFile=0x31c) returned 1 [0182.319] SetEndOfFile (hFile=0x31c) returned 1 [0182.326] SetEndOfFile (hFile=0x31c) returned 1 [0182.332] SetEndOfFile (hFile=0x31c) returned 1 [0182.339] SetEndOfFile (hFile=0x31c) returned 1 [0182.347] SetEndOfFile (hFile=0x31c) returned 1 [0182.354] SetEndOfFile (hFile=0x31c) returned 1 [0182.361] SetEndOfFile (hFile=0x31c) returned 1 [0182.366] SetEndOfFile (hFile=0x31c) returned 1 [0182.372] SetEndOfFile (hFile=0x31c) returned 1 [0182.378] SetEndOfFile (hFile=0x31c) returned 1 [0182.390] SetEndOfFile (hFile=0x31c) returned 1 [0182.395] SetEndOfFile (hFile=0x31c) returned 1 [0182.400] SetEndOfFile (hFile=0x31c) returned 1 [0182.406] SetEndOfFile (hFile=0x31c) returned 1 [0182.412] SetEndOfFile (hFile=0x31c) returned 1 [0182.418] SetEndOfFile (hFile=0x31c) returned 1 [0182.424] SetEndOfFile (hFile=0x31c) returned 1 [0182.431] SetEndOfFile (hFile=0x31c) returned 1 [0182.437] SetEndOfFile (hFile=0x31c) returned 1 [0182.441] SetEndOfFile (hFile=0x31c) returned 1 [0182.445] SetEndOfFile (hFile=0x31c) returned 1 [0182.456] SetEndOfFile (hFile=0x31c) returned 1 [0182.461] SetEndOfFile (hFile=0x31c) returned 1 [0182.471] SetEndOfFile (hFile=0x31c) returned 1 [0182.477] SetEndOfFile (hFile=0x31c) returned 1 [0182.481] SetEndOfFile (hFile=0x31c) returned 1 [0182.486] SetEndOfFile (hFile=0x31c) returned 1 [0182.491] SetEndOfFile (hFile=0x31c) returned 1 [0182.496] SetEndOfFile (hFile=0x31c) returned 1 [0182.503] SetEndOfFile (hFile=0x31c) returned 1 [0182.509] SetEndOfFile (hFile=0x31c) returned 1 [0182.514] SetEndOfFile (hFile=0x31c) returned 1 [0182.519] SetEndOfFile (hFile=0x31c) returned 1 [0182.524] SetEndOfFile (hFile=0x31c) returned 1 [0182.529] SetEndOfFile (hFile=0x31c) returned 1 [0182.538] SetEndOfFile (hFile=0x31c) returned 1 [0182.546] SetEndOfFile (hFile=0x31c) returned 1 [0182.551] SetEndOfFile (hFile=0x31c) returned 1 [0182.557] SetEndOfFile (hFile=0x31c) returned 1 [0182.562] SetEndOfFile (hFile=0x31c) returned 1 [0182.568] SetEndOfFile (hFile=0x31c) returned 1 [0182.573] SetEndOfFile (hFile=0x31c) returned 1 [0182.577] SetEndOfFile (hFile=0x31c) returned 1 [0182.583] SetEndOfFile (hFile=0x31c) returned 1 [0182.589] SetEndOfFile (hFile=0x31c) returned 1 [0182.594] SetEndOfFile (hFile=0x31c) returned 1 [0182.599] SetEndOfFile (hFile=0x31c) returned 1 [0182.604] SetEndOfFile (hFile=0x31c) returned 1 [0182.610] SetEndOfFile (hFile=0x31c) returned 1 [0182.615] SetEndOfFile (hFile=0x31c) returned 1 [0182.620] SetEndOfFile (hFile=0x31c) returned 1 [0182.627] SetEndOfFile (hFile=0x31c) returned 1 [0182.632] SetEndOfFile (hFile=0x31c) returned 1 [0182.637] SetEndOfFile (hFile=0x31c) returned 1 [0182.642] SetEndOfFile (hFile=0x31c) returned 1 [0182.648] SetEndOfFile (hFile=0x31c) returned 1 [0182.652] SetEndOfFile (hFile=0x31c) returned 1 [0182.658] SetEndOfFile (hFile=0x31c) returned 1 [0182.663] SetEndOfFile (hFile=0x31c) returned 1 [0182.668] SetEndOfFile (hFile=0x31c) returned 1 [0182.677] SetEndOfFile (hFile=0x31c) returned 1 [0182.692] SetEndOfFile (hFile=0x31c) returned 1 [0182.697] SetEndOfFile (hFile=0x31c) returned 1 [0182.702] SetEndOfFile (hFile=0x31c) returned 1 [0182.706] SetEndOfFile (hFile=0x31c) returned 1 [0182.711] SetEndOfFile (hFile=0x31c) returned 1 [0182.716] SetEndOfFile (hFile=0x31c) returned 1 [0182.722] SetEndOfFile (hFile=0x31c) returned 1 [0182.728] SetEndOfFile (hFile=0x31c) returned 1 [0182.735] SetEndOfFile (hFile=0x31c) returned 1 [0182.741] SetEndOfFile (hFile=0x31c) returned 1 [0182.747] SetEndOfFile (hFile=0x31c) returned 1 [0182.751] SetEndOfFile (hFile=0x31c) returned 1 [0182.759] SetEndOfFile (hFile=0x31c) returned 1 [0182.765] SetEndOfFile (hFile=0x31c) returned 1 [0182.769] SetEndOfFile (hFile=0x31c) returned 1 [0182.776] SetEndOfFile (hFile=0x31c) returned 1 [0182.784] SetEndOfFile (hFile=0x31c) returned 1 [0182.788] SetEndOfFile (hFile=0x31c) returned 1 [0182.794] SetEndOfFile (hFile=0x31c) returned 1 [0182.800] SetEndOfFile (hFile=0x31c) returned 1 [0182.806] SetEndOfFile (hFile=0x31c) returned 1 [0182.812] SetEndOfFile (hFile=0x31c) returned 1 [0182.818] SetEndOfFile (hFile=0x31c) returned 1 [0182.824] SetEndOfFile (hFile=0x31c) returned 1 [0182.829] SetEndOfFile (hFile=0x31c) returned 1 [0182.836] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\NxzOBAzgvcNeV3cE gd-\\b5GepjBp9EYKzeV\\-1DVuhiu_x6Y\\LvrtiqeAx zdKEixkd\\2FDVYf8sCprKRTU\\*", lpFindFileData=0x2fc68c | out: lpFindFileData=0x2fc68c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347857c0, ftCreationTime.dwHighDateTime=0x1d75bb1, ftLastAccessTime.dwLowDateTime=0xa3c8c370, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0xa3c8c370, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3caa80 [0182.837] SetEndOfFile (hFile=0x31c) returned 1 [0182.843] SetEndOfFile (hFile=0x31c) returned 1 [0182.848] SetEndOfFile (hFile=0x31c) returned 1 [0182.854] SetEndOfFile (hFile=0x31c) returned 1 [0182.859] SetEndOfFile (hFile=0x31c) returned 1 [0182.864] SetEndOfFile (hFile=0x31c) returned 1 [0182.871] SetEndOfFile (hFile=0x31c) returned 1 [0182.876] SetEndOfFile (hFile=0x31c) returned 1 [0182.883] SetEndOfFile (hFile=0x31c) returned 1 [0182.893] SetEndOfFile (hFile=0x31c) returned 1 [0182.899] SetEndOfFile (hFile=0x31c) returned 1 [0182.904] SetEndOfFile (hFile=0x31c) returned 1 [0182.909] SetEndOfFile (hFile=0x31c) returned 1 [0182.915] SetEndOfFile (hFile=0x31c) returned 1 [0182.920] SetEndOfFile (hFile=0x31c) returned 1 [0182.925] SetEndOfFile (hFile=0x31c) returned 1 [0182.930] SetEndOfFile (hFile=0x31c) returned 1 [0182.934] SetEndOfFile (hFile=0x31c) returned 1 [0182.940] SetEndOfFile (hFile=0x31c) returned 1 [0182.945] SetEndOfFile (hFile=0x31c) returned 1 [0182.949] SetEndOfFile (hFile=0x31c) returned 1 [0182.955] SetEndOfFile (hFile=0x31c) returned 1 [0182.959] SetEndOfFile (hFile=0x31c) returned 1 [0182.967] SetEndOfFile (hFile=0x31c) returned 1 [0182.972] SetEndOfFile (hFile=0x31c) returned 1 [0182.981] SetEndOfFile (hFile=0x31c) returned 1 [0182.987] SetEndOfFile (hFile=0x31c) returned 1 [0182.991] SetEndOfFile (hFile=0x31c) returned 1 [0182.999] SetEndOfFile (hFile=0x31c) returned 1 [0183.005] SetEndOfFile (hFile=0x31c) returned 1 [0183.009] SetEndOfFile (hFile=0x31c) returned 1 [0183.016] SetEndOfFile (hFile=0x31c) returned 1 [0183.021] SetEndOfFile (hFile=0x31c) returned 1 [0183.028] SetEndOfFile (hFile=0x31c) returned 1 [0183.033] SetEndOfFile (hFile=0x31c) returned 1 [0183.040] SetEndOfFile (hFile=0x31c) returned 1 [0183.045] SetEndOfFile (hFile=0x31c) returned 1 [0183.053] SetEndOfFile (hFile=0x31c) returned 1 [0183.060] SetEndOfFile (hFile=0x31c) returned 1 [0183.066] SetEndOfFile (hFile=0x31c) returned 1 [0183.073] SetEndOfFile (hFile=0x31c) returned 1 [0183.080] SetEndOfFile (hFile=0x31c) returned 1 [0183.102] SetEndOfFile (hFile=0x31c) returned 1 [0183.108] SetEndOfFile (hFile=0x31c) returned 1 [0183.114] SetEndOfFile (hFile=0x31c) returned 1 [0183.121] SetEndOfFile (hFile=0x31c) returned 1 [0183.127] SetEndOfFile (hFile=0x31c) returned 1 [0183.134] SetEndOfFile (hFile=0x31c) returned 1 [0183.141] SetEndOfFile (hFile=0x31c) returned 1 [0183.147] SetEndOfFile (hFile=0x31c) returned 1 [0183.155] SetEndOfFile (hFile=0x31c) returned 1 [0183.166] SetEndOfFile (hFile=0x31c) returned 1 [0183.172] SetEndOfFile (hFile=0x31c) returned 1 [0183.179] SetEndOfFile (hFile=0x31c) returned 1 [0183.185] SetEndOfFile (hFile=0x31c) returned 1 [0183.193] SetEndOfFile (hFile=0x31c) returned 1 [0183.199] SetEndOfFile (hFile=0x31c) returned 1 [0183.207] SetEndOfFile (hFile=0x31c) returned 1 [0183.214] SetEndOfFile (hFile=0x31c) returned 1 [0183.223] SetEndOfFile (hFile=0x31c) returned 1 [0183.229] SetEndOfFile (hFile=0x31c) returned 1 [0183.235] SetEndOfFile (hFile=0x31c) returned 1 [0183.239] SetEndOfFile (hFile=0x31c) returned 1 [0183.246] SetEndOfFile (hFile=0x31c) returned 1 [0183.252] SetEndOfFile (hFile=0x31c) returned 1 [0183.257] SetEndOfFile (hFile=0x31c) returned 1 [0183.262] SetEndOfFile (hFile=0x31c) returned 1 [0183.267] SetEndOfFile (hFile=0x31c) returned 1 [0183.274] SetEndOfFile (hFile=0x31c) returned 1 [0183.280] SetEndOfFile (hFile=0x31c) returned 1 [0183.287] SetEndOfFile (hFile=0x31c) returned 1 [0183.294] SetEndOfFile (hFile=0x31c) returned 1 [0183.301] SetEndOfFile (hFile=0x31c) returned 1 [0183.307] SetEndOfFile (hFile=0x31c) returned 1 [0183.313] SetEndOfFile (hFile=0x31c) returned 1 [0183.319] SetEndOfFile (hFile=0x31c) returned 1 [0183.330] SetEndOfFile (hFile=0x31c) returned 1 [0183.337] SetEndOfFile (hFile=0x31c) returned 1 [0183.342] SetEndOfFile (hFile=0x31c) returned 1 [0183.347] SetEndOfFile (hFile=0x31c) returned 1 [0183.353] SetEndOfFile (hFile=0x31c) returned 1 [0183.357] SetEndOfFile (hFile=0x31c) returned 1 [0183.362] SetEndOfFile (hFile=0x31c) returned 1 [0183.367] SetEndOfFile (hFile=0x31c) returned 1 [0183.372] SetEndOfFile (hFile=0x31c) returned 1 [0183.380] SetEndOfFile (hFile=0x31c) returned 1 [0183.386] SetEndOfFile (hFile=0x31c) returned 1 [0183.390] SetEndOfFile (hFile=0x31c) returned 1 [0183.395] SetEndOfFile (hFile=0x31c) returned 1 [0183.399] SetEndOfFile (hFile=0x31c) returned 1 [0183.404] SetEndOfFile (hFile=0x31c) returned 1 [0183.416] SetEndOfFile (hFile=0x31c) returned 1 [0183.424] SetEndOfFile (hFile=0x31c) returned 1 [0183.431] SetEndOfFile (hFile=0x31c) returned 1 [0183.437] SetEndOfFile (hFile=0x31c) returned 1 [0183.444] SetEndOfFile (hFile=0x31c) returned 1 [0183.451] SetEndOfFile (hFile=0x31c) returned 1 [0183.457] SetEndOfFile (hFile=0x31c) returned 1 [0183.467] SetEndOfFile (hFile=0x31c) returned 1 [0183.474] SetEndOfFile (hFile=0x31c) returned 1 [0183.479] SetEndOfFile (hFile=0x31c) returned 1 [0183.490] SetEndOfFile (hFile=0x31c) returned 1 [0183.497] SetEndOfFile (hFile=0x31c) returned 1 [0183.503] SetEndOfFile (hFile=0x31c) returned 1 [0183.510] SetEndOfFile (hFile=0x31c) returned 1 [0183.517] SetEndOfFile (hFile=0x31c) returned 1 [0183.523] SetEndOfFile (hFile=0x31c) returned 1 [0183.530] SetEndOfFile (hFile=0x31c) returned 1 [0183.536] SetEndOfFile (hFile=0x31c) returned 1 [0183.542] SetEndOfFile (hFile=0x31c) returned 1 [0183.551] SetEndOfFile (hFile=0x31c) returned 1 [0183.557] SetEndOfFile (hFile=0x31c) returned 1 [0183.563] SetEndOfFile (hFile=0x31c) returned 1 [0183.569] SetEndOfFile (hFile=0x31c) returned 1 [0183.577] SetEndOfFile (hFile=0x31c) returned 1 [0183.584] SetEndOfFile (hFile=0x31c) returned 1 [0183.591] SetEndOfFile (hFile=0x31c) returned 1 [0183.598] SetEndOfFile (hFile=0x31c) returned 1 [0183.605] SetEndOfFile (hFile=0x31c) returned 1 [0183.610] SetEndOfFile (hFile=0x31c) returned 1 [0183.780] CoTaskMemAlloc (cb=0x20c) returned 0x3dc230 [0183.781] SHGetFolderPathW (in: hwnd=0x0, csidl=38, hToken=0x0, dwFlags=0x0, pszPath=0x3dc230 | out: pszPath="C:\\Program Files (x86)") returned 0x0 [0183.784] CoTaskMemFree (pv=0x3dc230) [0183.785] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)", nBufferLength=0x105, lpBuffer=0x2fdf20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)", lpFilePart=0x0) returned 0x16 [0183.786] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)", nBufferLength=0x105, lpBuffer=0x2fdfbc, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)", lpFilePart=0x0) returned 0x16 [0183.787] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)", nBufferLength=0x105, lpBuffer=0x2fdf80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)", lpFilePart=0x0) returned 0x16 [0183.787] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x2fdf74, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0183.787] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)", nBufferLength=0x105, lpBuffer=0x2fdf74, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)", lpFilePart=0x0) returned 0x16 [0183.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fe1b4) returned 1 [0183.787] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)" (normalized: "c:\\program files (x86)"), fInfoLevelId=0x0, lpFileInformation=0x2fe478 | out: lpFileInformation=0x2fe478*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x499a3700, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x499a3700, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0183.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fe1b0) returned 1 [0183.788] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)", nBufferLength=0x105, lpBuffer=0x2fdf6c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)", lpFilePart=0x0) returned 0x16 [0183.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fe1a8) returned 1 [0183.788] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)" (normalized: "c:\\program files (x86)"), fInfoLevelId=0x0, lpFileInformation=0x2fe46c | out: lpFileInformation=0x2fe46c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x499a3700, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x499a3700, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0183.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fe1a4) returned 1 [0183.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fe450) returned 1 [0183.789] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x2fdf30, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0183.789] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)", lpFindFileData=0x2fe200 | out: lpFindFileData=0x2fe200*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x499a3700, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x499a3700, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Program Files (x86)", cAlternateFileName="PROGRA~2")) returned 0x3caa80 [0183.790] FindNextFileW (in: hFindFile=0x3caa80, lpFindFileData=0x2fe208 | out: lpFindFileData=0x2fe208*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0183.790] FindClose (in: hFindFile=0x3caa80 | out: hFindFile=0x3caa80) returned 1 [0183.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fe1c0) returned 1 [0183.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fe420) returned 1 [0183.792] GetLogicalDrives () returned 0x4 [0183.827] CopyFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Desktop\\Windows Session Manager.exe" (normalized: "c:\\users\\keecfmwgj\\desktop\\windows session manager.exe"), lpNewFileName="C:\\SaraJay.exe" (normalized: "c:\\sarajay.exe"), bFailIfExists=1) returned 1 [0183.854] GetFullPathNameW (in: lpFileName="C:\\autorun.inf", nBufferLength=0x105, lpBuffer=0x2fdea4, lpFilePart=0x0 | out: lpBuffer="C:\\autorun.inf", lpFilePart=0x0) returned 0xe [0183.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fe3bc) returned 1 [0183.854] CreateFileW (lpFileName="C:\\autorun.inf" (normalized: "c:\\autorun.inf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x2a8 [0183.855] GetFileType (hFile=0x2a8) returned 0x1 [0183.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fe3b8) returned 1 [0183.855] GetFileType (hFile=0x2a8) returned 0x1 [0183.864] WriteFile (in: hFile=0x2a8, lpBuffer=0x2b302d4*, nNumberOfBytesToWrite=0x32, lpNumberOfBytesWritten=0x2fe460, lpOverlapped=0x0 | out: lpBuffer=0x2b302d4*, lpNumberOfBytesWritten=0x2fe460*=0x32, lpOverlapped=0x0) returned 1 [0183.866] CloseHandle (hObject=0x2a8) returned 1 [0183.869] SetFileAttributesW (lpFileName="C:\\autorun.inf", dwFileAttributes=0x2) returned 1 [0183.869] SetFileAttributesW (lpFileName="C:\\SaraJay.exe", dwFileAttributes=0x2) returned 1 [0183.890] CoTaskMemAlloc (cb=0x20c) returned 0x3dc230 [0183.890] SHGetFolderPathW (in: hwnd=0x0, csidl=7, hToken=0x0, dwFlags=0x0, pszPath=0x3dc230 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup") returned 0x0 [0183.894] CoTaskMemFree (pv=0x3dc230) [0183.894] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", nBufferLength=0x105, lpBuffer=0x2fe078, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpFilePart=0x0) returned 0x50 [0183.917] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\Windows Session Manager.exe", nBufferLength=0x105, lpBuffer=0x2fe090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\Windows Session Manager.exe", lpFilePart=0x0) returned 0x36 [0183.920] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Windows Session Manager.exe", nBufferLength=0x105, lpBuffer=0x2fe10c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Windows Session Manager.exe", lpFilePart=0x0) returned 0x6c [0183.920] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fe34c) returned 1 [0183.920] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Windows Session Manager.exe" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\windows session manager.exe"), fInfoLevelId=0x0, lpFileInformation=0x2fe610 | out: lpFileInformation=0x2fe610*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0183.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fe348) returned 1 [0183.920] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\Windows Session Manager.exe", nBufferLength=0x105, lpBuffer=0x2fe090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\Windows Session Manager.exe", lpFilePart=0x0) returned 0x36 [0183.920] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\Windows Session Manager.exe", nBufferLength=0x105, lpBuffer=0x2fe0c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\Windows Session Manager.exe", lpFilePart=0x0) returned 0x36 [0183.921] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Windows Session Manager.exe", nBufferLength=0x105, lpBuffer=0x2fe0c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Windows Session Manager.exe", lpFilePart=0x0) returned 0x6c [0183.921] CopyFileW (lpExistingFileName="C:\\Users\\kEecfMwgj\\Desktop\\Windows Session Manager.exe" (normalized: "c:\\users\\keecfmwgj\\desktop\\windows session manager.exe"), lpNewFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Windows Session Manager.exe" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\windows session manager.exe"), bFailIfExists=1) returned 1 [0188.952] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Windows Session Manager.exe", nBufferLength=0x105, lpBuffer=0x2fe10c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Windows Session Manager.exe", lpFilePart=0x0) returned 0x6c [0188.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fe34c) returned 1 [0188.952] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Windows Session Manager.exe" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\windows session manager.exe"), fInfoLevelId=0x0, lpFileInformation=0x2fe610 | out: lpFileInformation=0x2fe610*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa471c510, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0xa471c510, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0xa9d11000, ftLastWriteTime.dwHighDateTime=0x1d763b5, nFileSizeHigh=0x0, nFileSizeLow=0x45800)) returned 1 [0188.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fe348) returned 1 [0195.833] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Windows Session Manager.exe", nBufferLength=0x105, lpBuffer=0x2fe10c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Windows Session Manager.exe", lpFilePart=0x0) returned 0x6c [0195.833] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fe34c) returned 1 [0195.833] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Windows Session Manager.exe" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\windows session manager.exe"), fInfoLevelId=0x0, lpFileInformation=0x2fe610 | out: lpFileInformation=0x2fe610*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa471c510, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0xa471c510, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0xa9d11000, ftLastWriteTime.dwHighDateTime=0x1d763b5, nFileSizeHigh=0x0, nFileSizeLow=0x45800)) returned 1 [0195.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fe348) returned 1 [0200.847] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Windows Session Manager.exe", nBufferLength=0x105, lpBuffer=0x2fe10c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Windows Session Manager.exe", lpFilePart=0x0) returned 0x6c [0200.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2fe34c) returned 1 [0200.848] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Windows Session Manager.exe" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\windows session manager.exe"), fInfoLevelId=0x0, lpFileInformation=0x2fe610 | out: lpFileInformation=0x2fe610*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa471c510, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0xa471c510, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0xa9d11000, ftLastWriteTime.dwHighDateTime=0x1d763b5, nFileSizeHigh=0x0, nFileSizeLow=0x45800)) returned 1 [0200.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2fe348) returned 1 Thread: id = 2 os_tid = 0xdc0 Thread: id = 3 os_tid = 0xdc4 [0087.033] CoGetContextToken (in: pToken=0xe2fc8c | out: pToken=0xe2fc8c) returned 0x800401f0 [0087.033] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0113.230] CoGetContextToken (in: pToken=0xe2fc74 | out: pToken=0xe2fc74) returned 0x0 [0113.230] CoGetContextToken (in: pToken=0xe2fbf8 | out: pToken=0xe2fbf8) returned 0x0 [0113.230] WbemLocator:IUnknown:Release (This=0x3c08f0) returned 0x1 [0113.230] WbemLocator:IUnknown:Release (This=0x3c08f0) returned 0x0 [0113.230] CoGetContextToken (in: pToken=0xe2fc74 | out: pToken=0xe2fc74) returned 0x0 [0113.230] IUnknown:QueryInterface (in: This=0x36e670, riid=0x72418ae0*(Data1=0x1da, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0xe2fc14 | out: ppvObject=0xe2fc14*=0x36e680) returned 0x0 [0113.231] CObjectContext::ContextCallback () Thread: id = 4 os_tid = 0xdc8 Thread: id = 5 os_tid = 0xdd4 [0126.488] CoGetContextToken (in: pToken=0x4b6f7f4 | out: pToken=0x4b6f7f4) returned 0x0 [0126.488] IUnknown:QueryInterface (in: This=0x36e7e0, riid=0x722fb24c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x4b6f818 | out: ppvObject=0x4b6f818*=0x36e7ec) returned 0x0 [0126.489] IComThreadingInfo:GetCurrentThreadType (in: This=0x36e7ec, pThreadType=0x4b6f844 | out: pThreadType=0x4b6f844*=0) returned 0x0 [0126.489] IUnknown:Release (This=0x36e7ec) returned 0x1 Thread: id = 6 os_tid = 0xdd8 [0091.423] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 Thread: id = 7 os_tid = 0xddc [0091.568] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 Thread: id = 8 os_tid = 0xde0 [0093.945] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0094.006] IIDFromString (in: lpsz="{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}", lpiid=0x4ceef1c | out: lpiid=0x4ceef1c) returned 0x0 [0094.016] CoGetClassObject (in: rclsid=0x3b11fc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x723c6bd4*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x4ceec38 | out: ppv=0x4ceec38*=0x3c0880) returned 0x0 [0096.066] WbemDefPath:IUnknown:QueryInterface (in: This=0x3c0880, riid=0x7238dd3c*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x4ceee50 | out: ppvObject=0x4ceee50*=0x0) returned 0x80004002 [0096.066] WbemDefPath:IClassFactory:CreateInstance (in: This=0x3c0880, pUnkOuter=0x0, riid=0x72272a54*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x4ceee5c | out: ppvObject=0x4ceee5c*=0x3be890) returned 0x0 [0096.071] WbemDefPath:IUnknown:Release (This=0x3c0880) returned 0x0 [0096.071] WbemDefPath:IUnknown:QueryInterface (in: This=0x3be890, riid=0x72272a54*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x4ceea7c | out: ppvObject=0x4ceea7c*=0x3be890) returned 0x0 [0096.072] WbemDefPath:IUnknown:QueryInterface (in: This=0x3be890, riid=0x72361b6c*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x4ceea30 | out: ppvObject=0x4ceea30*=0x0) returned 0x80004002 [0096.073] WbemDefPath:IUnknown:AddRef (This=0x3be890) returned 0x3 [0096.073] WbemDefPath:IUnknown:QueryInterface (in: This=0x3be890, riid=0x7236182c*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x4cee38c | out: ppvObject=0x4cee38c*=0x0) returned 0x80004002 [0096.073] WbemDefPath:IUnknown:QueryInterface (in: This=0x3be890, riid=0x72361764*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x4cee33c | out: ppvObject=0x4cee33c*=0x0) returned 0x80004002 [0096.073] WbemDefPath:IUnknown:QueryInterface (in: This=0x3be890, riid=0x72291388*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x4cee348 | out: ppvObject=0x4cee348*=0x3c0890) returned 0x0 [0096.073] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x3c0890, riid=0x72272a54*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x4cee350 | out: pCid=0x4cee350*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0096.073] WbemDefPath:IUnknown:Release (This=0x3c0890) returned 0x3 [0096.073] CoGetContextToken (in: pToken=0x4cee3a8 | out: pToken=0x4cee3a8) returned 0x0 [0096.075] CoGetContextToken (in: pToken=0x4cee7bc | out: pToken=0x4cee7bc) returned 0x0 [0096.075] WbemDefPath:IUnknown:QueryInterface (in: This=0x3be890, riid=0x72361aa8*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x4cee83c | out: ppvObject=0x4cee83c*=0x0) returned 0x80004002 [0096.075] WbemDefPath:IUnknown:Release (This=0x3be890) returned 0x2 [0096.076] WbemDefPath:IUnknown:Release (This=0x3be890) returned 0x1 [0096.076] SetEvent (hEvent=0x23c) returned 1 [0102.409] CoGetClassObject (in: rclsid=0x3b11fc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x723c6bd4*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x4ceec38 | out: ppv=0x4ceec38*=0x3df1d0) returned 0x0 [0102.409] WbemDefPath:IUnknown:QueryInterface (in: This=0x3df1d0, riid=0x7238dd3c*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x4ceee50 | out: ppvObject=0x4ceee50*=0x0) returned 0x80004002 [0102.409] WbemDefPath:IClassFactory:CreateInstance (in: This=0x3df1d0, pUnkOuter=0x0, riid=0x72272a54*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x4ceee5c | out: ppvObject=0x4ceee5c*=0x3be9e0) returned 0x0 [0102.409] WbemDefPath:IUnknown:Release (This=0x3df1d0) returned 0x0 [0102.409] WbemDefPath:IUnknown:QueryInterface (in: This=0x3be9e0, riid=0x72272a54*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x4ceea7c | out: ppvObject=0x4ceea7c*=0x3be9e0) returned 0x0 [0102.410] WbemDefPath:IUnknown:QueryInterface (in: This=0x3be9e0, riid=0x72361b6c*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x4ceea30 | out: ppvObject=0x4ceea30*=0x0) returned 0x80004002 [0102.410] WbemDefPath:IUnknown:AddRef (This=0x3be9e0) returned 0x3 [0102.410] WbemDefPath:IUnknown:QueryInterface (in: This=0x3be9e0, riid=0x7236182c*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x4cee38c | out: ppvObject=0x4cee38c*=0x0) returned 0x80004002 [0102.410] WbemDefPath:IUnknown:QueryInterface (in: This=0x3be9e0, riid=0x72361764*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x4cee33c | out: ppvObject=0x4cee33c*=0x0) returned 0x80004002 [0102.410] WbemDefPath:IUnknown:QueryInterface (in: This=0x3be9e0, riid=0x72291388*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x4cee348 | out: ppvObject=0x4cee348*=0x3df1e0) returned 0x0 [0102.410] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x3df1e0, riid=0x72272a54*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x4cee350 | out: pCid=0x4cee350*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0102.410] WbemDefPath:IUnknown:Release (This=0x3df1e0) returned 0x3 [0102.410] CoGetContextToken (in: pToken=0x4cee3a8 | out: pToken=0x4cee3a8) returned 0x0 [0102.410] CoGetContextToken (in: pToken=0x4cee7bc | out: pToken=0x4cee7bc) returned 0x0 [0102.410] WbemDefPath:IUnknown:QueryInterface (in: This=0x3be9e0, riid=0x72361aa8*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x4cee83c | out: ppvObject=0x4cee83c*=0x0) returned 0x80004002 [0102.410] WbemDefPath:IUnknown:Release (This=0x3be9e0) returned 0x2 [0102.410] WbemDefPath:IUnknown:Release (This=0x3be9e0) returned 0x1 [0102.410] SetEvent (hEvent=0x32c) returned 1 Thread: id = 9 os_tid = 0xde4 Thread: id = 10 os_tid = 0xde8 Thread: id = 11 os_tid = 0xdec Thread: id = 12 os_tid = 0xdf0 [0096.106] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0096.106] IIDFromString (in: lpsz="{4590F811-1D3A-11D0-891F-00AA004B2E24}", lpiid=0x526f204 | out: lpiid=0x526f204) returned 0x0 [0096.108] CoGetClassObject (in: rclsid=0x3cf374*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x723c6bd4*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x526ef20 | out: ppv=0x526ef20*=0x3d7580) returned 0x0 [0096.562] WbemLocator:IUnknown:QueryInterface (in: This=0x3d7580, riid=0x7238dd3c*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x526f138 | out: ppvObject=0x526f138*=0x0) returned 0x80004002 [0096.562] WbemLocator:IClassFactory:CreateInstance (in: This=0x3d7580, pUnkOuter=0x0, riid=0x72272a54*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x526f144 | out: ppvObject=0x526f144*=0x3c08f0) returned 0x0 [0096.562] WbemLocator:IUnknown:Release (This=0x3d7580) returned 0x0 [0096.562] WbemLocator:IUnknown:QueryInterface (in: This=0x3c08f0, riid=0x72272a54*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x526ed64 | out: ppvObject=0x526ed64*=0x3c08f0) returned 0x0 [0096.562] WbemLocator:IUnknown:QueryInterface (in: This=0x3c08f0, riid=0x72361b6c*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x526ed18 | out: ppvObject=0x526ed18*=0x0) returned 0x80004002 [0096.563] WbemLocator:IUnknown:AddRef (This=0x3c08f0) returned 0x3 [0096.563] WbemLocator:IUnknown:QueryInterface (in: This=0x3c08f0, riid=0x7236182c*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x526e674 | out: ppvObject=0x526e674*=0x0) returned 0x80004002 [0096.563] WbemLocator:IUnknown:QueryInterface (in: This=0x3c08f0, riid=0x72361764*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x526e624 | out: ppvObject=0x526e624*=0x0) returned 0x80004002 [0096.563] WbemLocator:IUnknown:QueryInterface (in: This=0x3c08f0, riid=0x72291388*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x526e630 | out: ppvObject=0x526e630*=0x0) returned 0x80004002 [0096.563] CoGetContextToken (in: pToken=0x526e690 | out: pToken=0x526e690) returned 0x0 [0096.564] CoGetObjectContext (in: riid=0x72272a54*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x3d7584 | out: ppv=0x3d7584*=0x36e7e0) returned 0x0 [0096.565] CoGetContextToken (in: pToken=0x526eaa4 | out: pToken=0x526eaa4) returned 0x0 [0096.565] WbemLocator:IUnknown:QueryInterface (in: This=0x3c08f0, riid=0x72361aa8*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x526eb24 | out: ppvObject=0x526eb24*=0x0) returned 0x80004002 [0096.565] WbemLocator:IUnknown:Release (This=0x3c08f0) returned 0x2 [0096.565] WbemLocator:IUnknown:Release (This=0x3c08f0) returned 0x1 [0096.566] CoGetContextToken (in: pToken=0x526f11c | out: pToken=0x526f11c) returned 0x0 [0096.566] CoGetContextToken (in: pToken=0x526f07c | out: pToken=0x526f07c) returned 0x0 [0096.566] WbemLocator:IUnknown:QueryInterface (in: This=0x3c08f0, riid=0x526f14c*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x526f148 | out: ppvObject=0x526f148*=0x3c08f0) returned 0x0 [0096.566] WbemLocator:IUnknown:AddRef (This=0x3c08f0) returned 0x3 [0096.566] WbemLocator:IUnknown:Release (This=0x3c08f0) returned 0x2 [0096.647] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x3be890, puCount=0x526f2dc | out: puCount=0x526f2dc*=0x2) returned 0x0 [0096.647] WbemDefPath:IWbemPath:GetText (in: This=0x3be890, lFlags=8, puBuffLength=0x526f2d8*=0x0, pszText=0x0 | out: puBuffLength=0x526f2d8*=0xf, pszText=0x0) returned 0x0 [0096.648] WbemDefPath:IWbemPath:GetText (in: This=0x3be890, lFlags=8, puBuffLength=0x526f2d8*=0xf, pszText="00000000000000" | out: puBuffLength=0x526f2d8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0096.654] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\", nBufferLength=0x105, lpBuffer=0x526e500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\", lpFilePart=0x0) returned 0x2e [0096.657] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\\\wminet_utils.dll", cchWideChar=63, lpMultiByteStr=0x526ea28, cbMultiByte=65, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\\\wminet_utils.dll", lpUsedDefaultChar=0x0) returned 63 [0096.657] LoadLibraryA (lpLibFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\\\wminet_utils.dll") returned 0x6ea40000 [0096.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ResetSecurity", cchWideChar=13, lpMultiByteStr=0x526ea5c, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ResetSecuritym³n¹Ï\x1d·Dþ%r8í&\x05\x01", lpUsedDefaultChar=0x0) returned 13 [0096.824] GetProcAddress (hModule=0x6ea40000, lpProcName="ResetSecurity") returned 0x6ea47dd0 [0096.837] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SetSecurity", cchWideChar=11, lpMultiByteStr=0x526ea5c, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SetSecurity", lpUsedDefaultChar=0x0) returned 11 [0096.838] GetProcAddress (hModule=0x6ea40000, lpProcName="SetSecurity") returned 0x6ea47e20 [0096.846] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BlessIWbemServices", cchWideChar=18, lpMultiByteStr=0x526ea58, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BlessIWbemServices³n¹Ï\x1d·Dþ%r8í&\x05", lpUsedDefaultChar=0x0) returned 18 [0096.847] GetProcAddress (hModule=0x6ea40000, lpProcName="BlessIWbemServices") returned 0x6ea46e70 [0096.871] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BlessIWbemServicesObject", cchWideChar=24, lpMultiByteStr=0x526ea50, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BlessIWbemServicesObject»m³n¹Ï\x1d·Dþ%r8í&\x05", lpUsedDefaultChar=0x0) returned 24 [0096.871] GetProcAddress (hModule=0x6ea40000, lpProcName="BlessIWbemServicesObject") returned 0x6ea46ed0 [0096.893] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetPropertyHandle", cchWideChar=17, lpMultiByteStr=0x526ea58, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetPropertyHandlem³n¹Ï\x1d·Dþ%r8í&\x05", lpUsedDefaultChar=0x0) returned 17 [0096.893] GetProcAddress (hModule=0x6ea40000, lpProcName="GetPropertyHandle") returned 0x6ea47820 [0096.931] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="WritePropertyValue", cchWideChar=18, lpMultiByteStr=0x526ea58, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="WritePropertyValue³n¹Ï\x1d·Dþ%r8í&\x05", lpUsedDefaultChar=0x0) returned 18 [0096.932] GetProcAddress (hModule=0x6ea40000, lpProcName="WritePropertyValue") returned 0x6ea47fa0 [0096.944] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Clone", cchWideChar=5, lpMultiByteStr=0x526ea64, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Clonem³n¹Ï\x1d·Dþ%r8í&\x05", lpUsedDefaultChar=0x0) returned 5 [0096.945] GetProcAddress (hModule=0x6ea40000, lpProcName="Clone") returned 0x6ea46f30 [0096.954] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VerifyClientKey", cchWideChar=15, lpMultiByteStr=0x526ea58, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VerifyClientKey", lpUsedDefaultChar=0x0) returned 15 [0096.954] GetProcAddress (hModule=0x6ea40000, lpProcName="VerifyClientKey") returned 0x6ea47f20 [0096.962] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetQualifierSet", cchWideChar=15, lpMultiByteStr=0x526ea58, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetQualifierSet", lpUsedDefaultChar=0x0) returned 15 [0096.962] GetProcAddress (hModule=0x6ea40000, lpProcName="GetQualifierSet") returned 0x6ea478e0 [0096.964] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Get", cchWideChar=3, lpMultiByteStr=0x526ea64, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Get", lpUsedDefaultChar=0x0) returned 3 [0096.965] GetProcAddress (hModule=0x6ea40000, lpProcName="Get") returned 0x6ea475c0 [0096.980] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Put", cchWideChar=3, lpMultiByteStr=0x526ea64, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Put", lpUsedDefaultChar=0x0) returned 3 [0096.981] GetProcAddress (hModule=0x6ea40000, lpProcName="Put") returned 0x6ea47a00 [0096.993] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Delete", cchWideChar=6, lpMultiByteStr=0x526ea64, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Delete³n¹Ï\x1d·Dþ%r8í&\x05", lpUsedDefaultChar=0x0) returned 6 [0096.994] GetProcAddress (hModule=0x6ea40000, lpProcName="Delete") returned 0x6ea47300 [0097.004] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetNames", cchWideChar=8, lpMultiByteStr=0x526ea60, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetNames»m³n¹Ï\x1d·Dþ%r8í&\x05", lpUsedDefaultChar=0x0) returned 8 [0097.004] GetProcAddress (hModule=0x6ea40000, lpProcName="GetNames") returned 0x6ea477c0 [0097.028] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BeginEnumeration", cchWideChar=16, lpMultiByteStr=0x526ea58, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BeginEnumeration»m³n¹Ï\x1d·Dþ%r8í&\x05", lpUsedDefaultChar=0x0) returned 16 [0097.028] GetProcAddress (hModule=0x6ea40000, lpProcName="BeginEnumeration") returned 0x6ea46e30 [0097.036] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Next", cchWideChar=4, lpMultiByteStr=0x526ea64, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Next»m³n¹Ï\x1d·Dþ%r8í&\x05", lpUsedDefaultChar=0x0) returned 4 [0097.037] GetProcAddress (hModule=0x6ea40000, lpProcName="Next") returned 0x6ea479a0 [0097.051] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="EndEnumeration", cchWideChar=14, lpMultiByteStr=0x526ea5c, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="EndEnumeration³n¹Ï\x1d·Dþ%r8í&\x05", lpUsedDefaultChar=0x0) returned 14 [0097.052] GetProcAddress (hModule=0x6ea40000, lpProcName="EndEnumeration") returned 0x6ea473c0 [0097.070] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetPropertyQualifierSet", cchWideChar=23, lpMultiByteStr=0x526ea50, cbMultiByte=25, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetPropertyQualifierSet", lpUsedDefaultChar=0x0) returned 23 [0097.070] GetProcAddress (hModule=0x6ea40000, lpProcName="GetPropertyQualifierSet") returned 0x6ea478b0 [0097.081] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Clone", cchWideChar=5, lpMultiByteStr=0x526ea64, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Clonem³n¹Ï\x1d·Dþ%r8í&\x05", lpUsedDefaultChar=0x0) returned 5 [0097.081] GetProcAddress (hModule=0x6ea40000, lpProcName="Clone") returned 0x6ea46f30 [0097.082] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetObjectText", cchWideChar=13, lpMultiByteStr=0x526ea5c, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetObjectTextm³n¹Ï\x1d·Dþ%r8í&\x05", lpUsedDefaultChar=0x0) returned 13 [0097.082] GetProcAddress (hModule=0x6ea40000, lpProcName="GetObjectText") returned 0x6ea477f0 [0097.130] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SpawnDerivedClass", cchWideChar=17, lpMultiByteStr=0x526ea58, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SpawnDerivedClassm³n¹Ï\x1d·Dþ%r8í&\x05", lpUsedDefaultChar=0x0) returned 17 [0097.131] GetProcAddress (hModule=0x6ea40000, lpProcName="SpawnDerivedClass") returned 0x6ea47e80 [0097.140] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SpawnInstance", cchWideChar=13, lpMultiByteStr=0x526ea5c, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SpawnInstancem³n¹Ï\x1d·Dþ%r8í&\x05", lpUsedDefaultChar=0x0) returned 13 [0097.140] GetProcAddress (hModule=0x6ea40000, lpProcName="SpawnInstance") returned 0x6ea47eb0 [0097.141] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CompareTo", cchWideChar=9, lpMultiByteStr=0x526ea60, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CompareTom³n¹Ï\x1d·Dþ%r8í&\x05", lpUsedDefaultChar=0x0) returned 9 [0097.142] GetProcAddress (hModule=0x6ea40000, lpProcName="CompareTo") returned 0x6ea47020 [0097.149] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetPropertyOrigin", cchWideChar=17, lpMultiByteStr=0x526ea58, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetPropertyOriginm³n¹Ï\x1d·Dþ%r8í&\x05", lpUsedDefaultChar=0x0) returned 17 [0097.149] GetProcAddress (hModule=0x6ea40000, lpProcName="GetPropertyOrigin") returned 0x6ea47880 [0097.158] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="InheritsFrom", cchWideChar=12, lpMultiByteStr=0x526ea5c, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InheritsFrom»m³n¹Ï\x1d·Dþ%r8í&\x05", lpUsedDefaultChar=0x0) returned 12 [0097.159] GetProcAddress (hModule=0x6ea40000, lpProcName="InheritsFrom") returned 0x6ea47900 [0097.160] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetMethod", cchWideChar=9, lpMultiByteStr=0x526ea60, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetMethodm³n¹Ï\x1d·Dþ%r8í&\x05", lpUsedDefaultChar=0x0) returned 9 [0097.161] GetProcAddress (hModule=0x6ea40000, lpProcName="GetMethod") returned 0x6ea47730 [0097.169] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PutMethod", cchWideChar=9, lpMultiByteStr=0x526ea60, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PutMethodm³n¹Ï\x1d·Dþ%r8í&\x05", lpUsedDefaultChar=0x0) returned 9 [0097.170] GetProcAddress (hModule=0x6ea40000, lpProcName="PutMethod") returned 0x6ea47bf0 [0097.179] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DeleteMethod", cchWideChar=12, lpMultiByteStr=0x526ea5c, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DeleteMethod»m³n¹Ï\x1d·Dþ%r8í&\x05", lpUsedDefaultChar=0x0) returned 12 [0097.179] GetProcAddress (hModule=0x6ea40000, lpProcName="DeleteMethod") returned 0x6ea47320 [0097.181] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BeginMethodEnumeration", cchWideChar=22, lpMultiByteStr=0x526ea54, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BeginMethodEnumeration³n¹Ï\x1d·Dþ%r8í&\x05", lpUsedDefaultChar=0x0) returned 22 [0097.181] GetProcAddress (hModule=0x6ea40000, lpProcName="BeginMethodEnumeration") returned 0x6ea46e50 [0097.182] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="NextMethod", cchWideChar=10, lpMultiByteStr=0x526ea60, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NextMethod³n¹Ï\x1d·Dþ%r8í&\x05", lpUsedDefaultChar=0x0) returned 10 [0097.182] GetProcAddress (hModule=0x6ea40000, lpProcName="NextMethod") returned 0x6ea479d0 [0097.192] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="EndMethodEnumeration", cchWideChar=20, lpMultiByteStr=0x526ea54, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="EndMethodEnumeration»m³n¹Ï\x1d·Dþ%r8í&\x05", lpUsedDefaultChar=0x0) returned 20 [0097.192] GetProcAddress (hModule=0x6ea40000, lpProcName="EndMethodEnumeration") returned 0x6ea473e0 [0097.194] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetMethodQualifierSet", cchWideChar=21, lpMultiByteStr=0x526ea54, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetMethodQualifierSetm³n¹Ï\x1d·Dþ%r8í&\x05", lpUsedDefaultChar=0x0) returned 21 [0097.194] GetProcAddress (hModule=0x6ea40000, lpProcName="GetMethodQualifierSet") returned 0x6ea47790 [0097.195] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetMethodOrigin", cchWideChar=15, lpMultiByteStr=0x526ea58, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetMethodOrigin", lpUsedDefaultChar=0x0) returned 15 [0097.196] GetProcAddress (hModule=0x6ea40000, lpProcName="GetMethodOrigin") returned 0x6ea47760 [0097.197] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_Get", cchWideChar=16, lpMultiByteStr=0x526ea58, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_Get»m³n¹Ï\x1d·Dþ%r8í&\x05", lpUsedDefaultChar=0x0) returned 16 [0097.197] GetProcAddress (hModule=0x6ea40000, lpProcName="QualifierSet_Get") returned 0x6ea47c80 [0097.213] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_Put", cchWideChar=16, lpMultiByteStr=0x526ea58, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_Put»m³n¹Ï\x1d·Dþ%r8í&\x05", lpUsedDefaultChar=0x0) returned 16 [0097.214] GetProcAddress (hModule=0x6ea40000, lpProcName="QualifierSet_Put") returned 0x6ea47d10 [0097.226] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_Delete", cchWideChar=19, lpMultiByteStr=0x526ea54, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_Delete", lpUsedDefaultChar=0x0) returned 19 [0097.226] GetProcAddress (hModule=0x6ea40000, lpProcName="QualifierSet_Delete") returned 0x6ea47c40 [0097.228] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_GetNames", cchWideChar=21, lpMultiByteStr=0x526ea54, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_GetNamesm³n¹Ï\x1d·Dþ%r8í&\x05", lpUsedDefaultChar=0x0) returned 21 [0097.228] GetProcAddress (hModule=0x6ea40000, lpProcName="QualifierSet_GetNames") returned 0x6ea47cb0 [0097.242] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_BeginEnumeration", cchWideChar=29, lpMultiByteStr=0x526ea4c, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_BeginEnumerationm³n¹Ï\x1d·Dþ%r8í&\x05", lpUsedDefaultChar=0x0) returned 29 [0097.243] GetProcAddress (hModule=0x6ea40000, lpProcName="QualifierSet_BeginEnumeration") returned 0x6ea47c20 [0097.244] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_Next", cchWideChar=17, lpMultiByteStr=0x526ea58, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_Nextm³n¹Ï\x1d·Dþ%r8í&\x05", lpUsedDefaultChar=0x0) returned 17 [0097.245] GetProcAddress (hModule=0x6ea40000, lpProcName="QualifierSet_Next") returned 0x6ea47ce0 [0097.258] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_EndEnumeration", cchWideChar=27, lpMultiByteStr=0x526ea4c, cbMultiByte=29, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_EndEnumeration", lpUsedDefaultChar=0x0) returned 27 [0097.258] GetProcAddress (hModule=0x6ea40000, lpProcName="QualifierSet_EndEnumeration") returned 0x6ea47c60 [0097.260] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetCurrentApartmentType", cchWideChar=23, lpMultiByteStr=0x526ea50, cbMultiByte=25, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetCurrentApartmentType", lpUsedDefaultChar=0x0) returned 23 [0097.260] GetProcAddress (hModule=0x6ea40000, lpProcName="GetCurrentApartmentType") returned 0x6ea478e0 [0097.269] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetDemultiplexedStub", cchWideChar=20, lpMultiByteStr=0x526ea54, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetDemultiplexedStub»m³n¹Ï\x1d·Dþ%r8í&\x05", lpUsedDefaultChar=0x0) returned 20 [0097.269] GetProcAddress (hModule=0x6ea40000, lpProcName="GetDemultiplexedStub") returned 0x6ea475f0 [0097.280] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CreateInstanceEnumWmi", cchWideChar=21, lpMultiByteStr=0x526ea54, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CreateInstanceEnumWmim³n¹Ï\x1d·Dþ%r8í&\x05", lpUsedDefaultChar=0x0) returned 21 [0097.281] GetProcAddress (hModule=0x6ea40000, lpProcName="CreateInstanceEnumWmi") returned 0x6ea47230 [0097.307] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CreateClassEnumWmi", cchWideChar=18, lpMultiByteStr=0x526ea58, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CreateClassEnumWmi³n¹Ï\x1d·Dþ%r8í&\x05", lpUsedDefaultChar=0x0) returned 18 [0097.307] GetProcAddress (hModule=0x6ea40000, lpProcName="CreateClassEnumWmi") returned 0x6ea47160 [0097.309] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ExecQueryWmi", cchWideChar=12, lpMultiByteStr=0x526ea5c, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ExecQueryWmi»m³n¹Ï\x1d·Dþ%r8í&\x05", lpUsedDefaultChar=0x0) returned 12 [0097.309] GetProcAddress (hModule=0x6ea40000, lpProcName="ExecQueryWmi") returned 0x6ea474e0 [0097.337] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ExecNotificationQueryWmi", cchWideChar=24, lpMultiByteStr=0x526ea50, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ExecNotificationQueryWmi»m³n¹Ï\x1d·Dþ%r8í&\x05", lpUsedDefaultChar=0x0) returned 24 [0097.337] GetProcAddress (hModule=0x6ea40000, lpProcName="ExecNotificationQueryWmi") returned 0x6ea47400 [0097.339] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PutInstanceWmi", cchWideChar=14, lpMultiByteStr=0x526ea5c, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PutInstanceWmi³n¹Ï\x1d·Dþ%r8í&\x05", lpUsedDefaultChar=0x0) returned 14 [0097.339] GetProcAddress (hModule=0x6ea40000, lpProcName="PutInstanceWmi") returned 0x6ea47b10 [0097.357] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PutClassWmi", cchWideChar=11, lpMultiByteStr=0x526ea5c, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PutClassWmi", lpUsedDefaultChar=0x0) returned 11 [0097.358] GetProcAddress (hModule=0x6ea40000, lpProcName="PutClassWmi") returned 0x6ea47a30 [0097.360] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CloneEnumWbemClassObject", cchWideChar=24, lpMultiByteStr=0x526ea50, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CloneEnumWbemClassObject»m³n¹Ï\x1d·Dþ%r8í&\x05", lpUsedDefaultChar=0x0) returned 24 [0097.360] GetProcAddress (hModule=0x6ea40000, lpProcName="CloneEnumWbemClassObject") returned 0x6ea46f50 [0097.380] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ConnectServerWmi", cchWideChar=16, lpMultiByteStr=0x526ea58, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ConnectServerWmi»m³n¹Ï\x1d·Dþ%r8í&\x05", lpUsedDefaultChar=0x0) returned 16 [0097.381] GetProcAddress (hModule=0x6ea40000, lpProcName="ConnectServerWmi") returned 0x6ea47050 [0097.408] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetErrorInfo", cchWideChar=12, lpMultiByteStr=0x526ea5c, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetErrorInfo»m³n¹Ï\x1d·Dþ%r8í&\x05", lpUsedDefaultChar=0x0) returned 12 [0097.408] GetProcAddress (hModule=0x6ea40000, lpProcName="GetErrorInfo") returned 0x6ea47650 [0097.414] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Initialize", cchWideChar=10, lpMultiByteStr=0x526ea60, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Initialize³n¹Ï\x1d·Dþ%r8í&\x05", lpUsedDefaultChar=0x0) returned 10 [0097.415] GetProcAddress (hModule=0x6ea40000, lpProcName="Initialize") returned 0x6ea47920 [0097.429] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319", ulOptions=0x0, samDesired=0x20019, phkResult=0x526ea10 | out: phkResult=0x526ea10*=0x2e4) returned 0x0 [0097.430] RegQueryValueExW (in: hKey=0x2e4, lpValueName="WMIDisableCOMSecurity", lpReserved=0x0, lpType=0x526ea2c, lpData=0x0, lpcbData=0x526ea28*=0x0 | out: lpType=0x526ea2c*=0x0, lpData=0x0, lpcbData=0x526ea28*=0x0) returned 0x2 [0097.430] RegCloseKey (hKey=0x2e4) returned 0x0 [0097.431] CoCreateInstance (in: rclsid=0x6ea43734*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x6ea43794*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x526f10c | out: ppv=0x526f10c*=0x3c0950) returned 0x0 [0097.432] WbemLocator:IWbemLocator:ConnectServer (in: This=0x3c0950, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x526f220 | out: ppNamespace=0x526f220*=0x367dd0) returned 0x0 [0102.150] WbemLocator:IUnknown:QueryInterface (in: This=0x367dd0, riid=0x6ea435b4*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x526f030 | out: ppvObject=0x526f030*=0x3e52fc) returned 0x0 [0102.151] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x3e52fc, pProxy=0x367dd0, pAuthnSvc=0x526f080, pAuthzSvc=0x526f07c, pServerPrincName=0x526f074, pAuthnLevel=0x526f078, pImpLevel=0x526f068, pAuthInfo=0x526f06c, pCapabilites=0x526f070 | out: pAuthnSvc=0x526f080*=0xa, pAuthzSvc=0x526f07c*=0x0, pServerPrincName=0x526f074, pAuthnLevel=0x526f078*=0x6, pImpLevel=0x526f068*=0x2, pAuthInfo=0x526f06c, pCapabilites=0x526f070*=0x1) returned 0x0 [0102.151] WbemLocator:IUnknown:Release (This=0x3e52fc) returned 0x1 [0102.151] WbemLocator:IUnknown:QueryInterface (in: This=0x367dd0, riid=0x6ea435a4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x526f024 | out: ppvObject=0x526f024*=0x3e531c) returned 0x0 [0102.151] WbemLocator:IUnknown:QueryInterface (in: This=0x367dd0, riid=0x6ea435b4*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x526f010 | out: ppvObject=0x526f010*=0x3e52fc) returned 0x0 [0102.151] WbemLocator:IClientSecurity:SetBlanket (This=0x3e52fc, pProxy=0x367dd0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0102.151] WbemLocator:IUnknown:Release (This=0x3e52fc) returned 0x2 [0102.151] WbemLocator:IUnknown:Release (This=0x3e531c) returned 0x1 [0102.151] CoTaskMemFree (pv=0x3e9d90) [0102.151] WbemLocator:IUnknown:AddRef (This=0x367dd0) returned 0x2 [0102.152] WbemLocator:IUnknown:Release (This=0x3c0950) returned 0x0 [0102.153] CoGetContextToken (in: pToken=0x526e564 | out: pToken=0x526e564) returned 0x0 [0102.153] CoGetContextToken (in: pToken=0x526e974 | out: pToken=0x526e974) returned 0x0 [0102.153] WbemLocator:IUnknown:QueryInterface (in: This=0x367dd0, riid=0x72361aa8*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x526e910 | out: ppvObject=0x526e910*=0x3e5304) returned 0x0 [0102.154] WbemLocator:IRpcOptions:Query (in: This=0x3e5304, pPrx=0x3e4fe0, dwProperty=2, pdwValue=0x526ea04 | out: pdwValue=0x526ea04) returned 0x80004002 [0102.154] WbemLocator:IUnknown:Release (This=0x3e5304) returned 0x2 [0102.154] CoGetContextToken (in: pToken=0x526ef44 | out: pToken=0x526ef44) returned 0x0 [0102.154] CoGetContextToken (in: pToken=0x526eea4 | out: pToken=0x526eea4) returned 0x0 [0102.154] WbemLocator:IUnknown:QueryInterface (in: This=0x367dd0, riid=0x526ef74*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x526ee40 | out: ppvObject=0x526ee40*=0x367dd0) returned 0x0 [0102.155] WbemLocator:IUnknown:Release (This=0x367dd0) returned 0x2 [0102.165] SysStringLen (param_1=0x0) returned 0x0 [0102.167] CoUninitialize () Thread: id = 80 os_tid = 0xdf8 [0102.182] CoGetContextToken (in: pToken=0x526f320 | out: pToken=0x526f320) returned 0x0 [0102.182] CoGetContextToken (in: pToken=0x526f30c | out: pToken=0x526f30c) returned 0x0 [0102.182] CoGetMarshalSizeMax (in: pulSize=0x526f2c8, riid=0x72272a54*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x3e4fe0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0 | out: pulSize=0x526f2c8) returned 0x0 [0102.183] CoMarshalInterface (pStm=0x3bf4b0, riid=0x72272a54*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x3e4fe0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0) returned 0x0 Thread: id = 81 os_tid = 0xdfc [0102.188] WbemLocator:IUnknown:QueryInterface (in: This=0x367dd0, riid=0x3cfaa0*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x55ef420 | out: ppvObject=0x55ef420*=0x367dd0) returned 0x0 [0102.188] WbemLocator:IUnknown:QueryInterface (in: This=0x367dd0, riid=0x6e9962ec*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x55ef3bc | out: ppvObject=0x55ef3bc*=0x367dd0) returned 0x0 [0102.188] WbemLocator:IUnknown:QueryInterface (in: This=0x367dd0, riid=0x6e9962ec*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x55ef374 | out: ppvObject=0x55ef374*=0x367dd0) returned 0x0 Process: id = "2" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x76c83000" os_pid = "0x364" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "rpc_server" parent_id = "1" os_parent_pid = "0x1c0" cmd_line = "C:\\Windows\\system32\\svchost.exe -k netsvcs" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xa], "NT SERVICE\\LanmanServer" [0xa], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xa], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xa], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xa], "NT SERVICE\\wuauserv" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000d070" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 13 os_tid = 0xd5c Thread: id = 14 os_tid = 0xd58 Thread: id = 15 os_tid = 0xcf0 Thread: id = 16 os_tid = 0xce4 Thread: id = 17 os_tid = 0xc64 Thread: id = 18 os_tid = 0xb4c Thread: id = 19 os_tid = 0x744 Thread: id = 20 os_tid = 0x474 Thread: id = 21 os_tid = 0x23c Thread: id = 22 os_tid = 0x3a4 Thread: id = 23 os_tid = 0x4f4 Thread: id = 24 os_tid = 0x554 Thread: id = 25 os_tid = 0x2bc Thread: id = 26 os_tid = 0x7c4 Thread: id = 27 os_tid = 0x7bc Thread: id = 28 os_tid = 0x110 Thread: id = 29 os_tid = 0xc4 Thread: id = 30 os_tid = 0x7cc Thread: id = 31 os_tid = 0x55c Thread: id = 32 os_tid = 0x41c Thread: id = 33 os_tid = 0x420 Thread: id = 34 os_tid = 0x7b8 Thread: id = 35 os_tid = 0x788 Thread: id = 36 os_tid = 0x784 Thread: id = 37 os_tid = 0x760 Thread: id = 38 os_tid = 0x740 Thread: id = 39 os_tid = 0x72c Thread: id = 40 os_tid = 0x720 Thread: id = 41 os_tid = 0x71c Thread: id = 42 os_tid = 0x6f8 Thread: id = 43 os_tid = 0x6dc Thread: id = 44 os_tid = 0x6c0 Thread: id = 45 os_tid = 0x6bc Thread: id = 46 os_tid = 0x6ac Thread: id = 47 os_tid = 0x698 Thread: id = 48 os_tid = 0x4a0 Thread: id = 49 os_tid = 0x49c Thread: id = 50 os_tid = 0x48c Thread: id = 51 os_tid = 0x488 Thread: id = 52 os_tid = 0x484 Thread: id = 53 os_tid = 0x120 Thread: id = 54 os_tid = 0x168 Thread: id = 55 os_tid = 0x3f0 Thread: id = 56 os_tid = 0x3e8 Thread: id = 57 os_tid = 0x3dc Thread: id = 58 os_tid = 0x384 Thread: id = 59 os_tid = 0x380 Thread: id = 60 os_tid = 0x37c Thread: id = 61 os_tid = 0x370 Thread: id = 62 os_tid = 0x368 Thread: id = 82 os_tid = 0xe00 Thread: id = 83 os_tid = 0xe04 Thread: id = 84 os_tid = 0xe08 Thread: id = 85 os_tid = 0xe0c Thread: id = 86 os_tid = 0xe10 Thread: id = 87 os_tid = 0xe14 Thread: id = 108 os_tid = 0xef0 Thread: id = 109 os_tid = 0xef4 Thread: id = 110 os_tid = 0xef8 Thread: id = 111 os_tid = 0xefc Thread: id = 112 os_tid = 0xf04 Thread: id = 114 os_tid = 0xf24 Thread: id = 116 os_tid = 0xf34 Thread: id = 140 os_tid = 0xfec Thread: id = 163 os_tid = 0xc10 Thread: id = 164 os_tid = 0xc30 Thread: id = 165 os_tid = 0xc4c Thread: id = 166 os_tid = 0xc48 Thread: id = 167 os_tid = 0xc94 Thread: id = 174 os_tid = 0xa5c Process: id = "3" image_name = "wmiprvse.exe" filename = "c:\\windows\\system32\\wbem\\wmiprvse.exe" page_root = "0x4656a000" os_pid = "0xb64" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "rpc_server" parent_id = "2" os_parent_pid = "0x248" cmd_line = "C:\\Windows\\system32\\wbem\\wmiprvse.exe -secured -Embedding" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Network Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "WMI (Network Service)" [0xf], "NT AUTHORITY\\Logon Session 00000000:000494a5" [0xc000000f] Thread: id = 63 os_tid = 0x42c Thread: id = 64 os_tid = 0xb40 Thread: id = 65 os_tid = 0x8bc Thread: id = 66 os_tid = 0x8c0 Thread: id = 67 os_tid = 0xb28 Thread: id = 68 os_tid = 0xb74 Thread: id = 69 os_tid = 0xb70 Thread: id = 70 os_tid = 0xb6c Thread: id = 71 os_tid = 0xb68 Thread: id = 115 os_tid = 0xf30 Thread: id = 171 os_tid = 0x124 Process: id = "4" image_name = "wmiprvse.exe" filename = "c:\\windows\\system32\\wbem\\wmiprvse.exe" page_root = "0x54362000" os_pid = "0x498" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "rpc_server" parent_id = "2" os_parent_pid = "0x248" cmd_line = "C:\\Windows\\system32\\wbem\\wmiprvse.exe -Embedding" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xe], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xe], "NT SERVICE\\LanmanServer" [0xe], "NT SERVICE\\MMCSS" [0xa], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xe], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xe], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xe], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xe], "NT SERVICE\\wuauserv" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000d070" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 72 os_tid = 0x358 Thread: id = 73 os_tid = 0x7e4 Thread: id = 74 os_tid = 0x7e8 Thread: id = 75 os_tid = 0x5d8 Thread: id = 76 os_tid = 0x324 Thread: id = 77 os_tid = 0x550 Thread: id = 78 os_tid = 0x430 Thread: id = 79 os_tid = 0x268 Thread: id = 113 os_tid = 0xf18 Thread: id = 170 os_tid = 0xcc8 Process: id = "5" image_name = "cmd.exe" filename = "c:\\windows\\syswow64\\cmd.exe" page_root = "0x39e1b000" os_pid = "0xe18" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0xdb0" cmd_line = "\"cmd.exe\" /c vssadmin.exe delete shadows /all /quiet" cur_dir = "C:\\Users\\kEecfMwgj\\Desktop\\" os_username = "Q9IATRKPRH\\kEecfMwgj" bitness = "32" os_groups = "Q9IATRKPRH\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e32c" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 88 os_tid = 0xe1c [0104.392] GetProcAddress (hModule=0x77350000, lpProcName="SetConsoleInputExeNameW") returned 0x7737a79d [0104.394] GetProcessHeap () returned 0x400000 [0104.394] RtlAllocateHeap (HeapHandle=0x400000, Flags=0x8, Size=0x400a) returned 0x4158f0 [0104.394] GetProcessHeap () returned 0x400000 [0104.394] HeapFree (in: hHeap=0x400000, dwFlags=0x0, lpMem=0x4158f0 | out: hHeap=0x400000) returned 1 [0104.395] _wcsicmp (_String1="vssadmin.exe", _String2=")") returned 77 [0104.395] _wcsicmp (_String1="FOR", _String2="vssadmin.exe") returned -16 [0104.395] _wcsicmp (_String1="FOR/?", _String2="vssadmin.exe") returned -16 [0104.395] _wcsicmp (_String1="IF", _String2="vssadmin.exe") returned -13 [0104.395] _wcsicmp (_String1="IF/?", _String2="vssadmin.exe") returned -13 [0104.395] _wcsicmp (_String1="REM", _String2="vssadmin.exe") returned -4 [0104.395] _wcsicmp (_String1="REM/?", _String2="vssadmin.exe") returned -4 [0104.395] GetProcessHeap () returned 0x400000 [0104.395] RtlAllocateHeap (HeapHandle=0x400000, Flags=0x8, Size=0x58) returned 0x4130d0 [0104.395] GetProcessHeap () returned 0x400000 [0104.395] RtlAllocateHeap (HeapHandle=0x400000, Flags=0x8, Size=0x22) returned 0x413130 [0104.396] GetProcessHeap () returned 0x400000 [0104.396] RtlAllocateHeap (HeapHandle=0x400000, Flags=0x8, Size=0x40) returned 0x413160 [0104.397] GetConsoleTitleW (in: lpConsoleTitle=0x38f540, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0104.398] GetFileAttributesW (lpFileName="vssadmin.exe" (normalized: "c:\\users\\keecfmwgj\\desktop\\vssadmin.exe")) returned 0xffffffff [0104.398] _wcsicmp (_String1="vssadmin", _String2="DIR") returned 18 [0104.398] _wcsicmp (_String1="vssadmin", _String2="ERASE") returned 17 [0104.398] _wcsicmp (_String1="vssadmin", _String2="DEL") returned 18 [0104.398] _wcsicmp (_String1="vssadmin", _String2="TYPE") returned 2 [0104.398] _wcsicmp (_String1="vssadmin", _String2="COPY") returned 19 [0104.398] _wcsicmp (_String1="vssadmin", _String2="CD") returned 19 [0104.398] _wcsicmp (_String1="vssadmin", _String2="CHDIR") returned 19 [0104.398] _wcsicmp (_String1="vssadmin", _String2="RENAME") returned 4 [0104.398] _wcsicmp (_String1="vssadmin", _String2="REN") returned 4 [0104.398] _wcsicmp (_String1="vssadmin", _String2="ECHO") returned 17 [0104.398] _wcsicmp (_String1="vssadmin", _String2="SET") returned 3 [0104.398] _wcsicmp (_String1="vssadmin", _String2="PAUSE") returned 6 [0104.398] _wcsicmp (_String1="vssadmin", _String2="DATE") returned 18 [0104.398] _wcsicmp (_String1="vssadmin", _String2="TIME") returned 2 [0104.398] _wcsicmp (_String1="vssadmin", _String2="PROMPT") returned 6 [0104.398] _wcsicmp (_String1="vssadmin", _String2="MD") returned 9 [0104.399] _wcsicmp (_String1="vssadmin", _String2="MKDIR") returned 9 [0104.399] _wcsicmp (_String1="vssadmin", _String2="RD") returned 4 [0104.399] _wcsicmp (_String1="vssadmin", _String2="RMDIR") returned 4 [0104.399] _wcsicmp (_String1="vssadmin", _String2="PATH") returned 6 [0104.399] _wcsicmp (_String1="vssadmin", _String2="GOTO") returned 15 [0104.399] _wcsicmp (_String1="vssadmin", _String2="SHIFT") returned 3 [0104.399] _wcsicmp (_String1="vssadmin", _String2="CLS") returned 19 [0104.399] _wcsicmp (_String1="vssadmin", _String2="CALL") returned 19 [0104.399] _wcsicmp (_String1="vssadmin", _String2="VERIFY") returned 14 [0104.399] _wcsicmp (_String1="vssadmin", _String2="VER") returned 14 [0104.399] _wcsicmp (_String1="vssadmin", _String2="VOL") returned 4 [0104.399] _wcsicmp (_String1="vssadmin", _String2="EXIT") returned 17 [0104.399] _wcsicmp (_String1="vssadmin", _String2="SETLOCAL") returned 3 [0104.399] _wcsicmp (_String1="vssadmin", _String2="ENDLOCAL") returned 17 [0104.399] _wcsicmp (_String1="vssadmin", _String2="TITLE") returned 2 [0104.399] _wcsicmp (_String1="vssadmin", _String2="START") returned 3 [0104.399] _wcsicmp (_String1="vssadmin", _String2="DPATH") returned 18 [0104.399] _wcsicmp (_String1="vssadmin", _String2="KEYS") returned 11 [0104.399] _wcsicmp (_String1="vssadmin", _String2="MOVE") returned 9 [0104.399] _wcsicmp (_String1="vssadmin", _String2="PUSHD") returned 6 [0104.399] _wcsicmp (_String1="vssadmin", _String2="POPD") returned 6 [0104.399] _wcsicmp (_String1="vssadmin", _String2="ASSOC") returned 21 [0104.399] _wcsicmp (_String1="vssadmin", _String2="FTYPE") returned 16 [0104.399] _wcsicmp (_String1="vssadmin", _String2="BREAK") returned 20 [0104.399] _wcsicmp (_String1="vssadmin", _String2="COLOR") returned 19 [0104.400] _wcsicmp (_String1="vssadmin", _String2="MKLINK") returned 9 [0104.400] _wcsicmp (_String1="vssadmin", _String2="DIR") returned 18 [0104.400] _wcsicmp (_String1="vssadmin", _String2="ERASE") returned 17 [0104.400] _wcsicmp (_String1="vssadmin", _String2="DEL") returned 18 [0104.400] _wcsicmp (_String1="vssadmin", _String2="TYPE") returned 2 [0104.400] _wcsicmp (_String1="vssadmin", _String2="COPY") returned 19 [0104.400] _wcsicmp (_String1="vssadmin", _String2="CD") returned 19 [0104.400] _wcsicmp (_String1="vssadmin", _String2="CHDIR") returned 19 [0104.400] _wcsicmp (_String1="vssadmin", _String2="RENAME") returned 4 [0104.400] _wcsicmp (_String1="vssadmin", _String2="REN") returned 4 [0104.400] _wcsicmp (_String1="vssadmin", _String2="ECHO") returned 17 [0104.400] _wcsicmp (_String1="vssadmin", _String2="SET") returned 3 [0104.400] _wcsicmp (_String1="vssadmin", _String2="PAUSE") returned 6 [0104.400] _wcsicmp (_String1="vssadmin", _String2="DATE") returned 18 [0104.400] _wcsicmp (_String1="vssadmin", _String2="TIME") returned 2 [0104.400] _wcsicmp (_String1="vssadmin", _String2="PROMPT") returned 6 [0104.400] _wcsicmp (_String1="vssadmin", _String2="MD") returned 9 [0104.400] _wcsicmp (_String1="vssadmin", _String2="MKDIR") returned 9 [0104.400] _wcsicmp (_String1="vssadmin", _String2="RD") returned 4 [0104.400] _wcsicmp (_String1="vssadmin", _String2="RMDIR") returned 4 [0104.400] _wcsicmp (_String1="vssadmin", _String2="PATH") returned 6 [0104.400] _wcsicmp (_String1="vssadmin", _String2="GOTO") returned 15 [0104.400] _wcsicmp (_String1="vssadmin", _String2="SHIFT") returned 3 [0104.400] _wcsicmp (_String1="vssadmin", _String2="CLS") returned 19 [0104.400] _wcsicmp (_String1="vssadmin", _String2="CALL") returned 19 [0104.400] _wcsicmp (_String1="vssadmin", _String2="VERIFY") returned 14 [0104.401] _wcsicmp (_String1="vssadmin", _String2="VER") returned 14 [0104.401] _wcsicmp (_String1="vssadmin", _String2="VOL") returned 4 [0104.401] _wcsicmp (_String1="vssadmin", _String2="EXIT") returned 17 [0104.401] _wcsicmp (_String1="vssadmin", _String2="SETLOCAL") returned 3 [0104.401] _wcsicmp (_String1="vssadmin", _String2="ENDLOCAL") returned 17 [0104.401] _wcsicmp (_String1="vssadmin", _String2="TITLE") returned 2 [0104.401] _wcsicmp (_String1="vssadmin", _String2="START") returned 3 [0104.401] _wcsicmp (_String1="vssadmin", _String2="DPATH") returned 18 [0104.401] _wcsicmp (_String1="vssadmin", _String2="KEYS") returned 11 [0104.401] _wcsicmp (_String1="vssadmin", _String2="MOVE") returned 9 [0104.401] _wcsicmp (_String1="vssadmin", _String2="PUSHD") returned 6 [0104.401] _wcsicmp (_String1="vssadmin", _String2="POPD") returned 6 [0104.401] _wcsicmp (_String1="vssadmin", _String2="ASSOC") returned 21 [0104.401] _wcsicmp (_String1="vssadmin", _String2="FTYPE") returned 16 [0104.401] _wcsicmp (_String1="vssadmin", _String2="BREAK") returned 20 [0104.401] _wcsicmp (_String1="vssadmin", _String2="COLOR") returned 19 [0104.401] _wcsicmp (_String1="vssadmin", _String2="MKLINK") returned 9 [0104.401] _wcsicmp (_String1="vssadmin", _String2="FOR") returned 16 [0104.401] _wcsicmp (_String1="vssadmin", _String2="IF") returned 13 [0104.401] _wcsicmp (_String1="vssadmin", _String2="REM") returned 4 [0104.402] GetProcessHeap () returned 0x400000 [0104.402] RtlAllocateHeap (HeapHandle=0x400000, Flags=0x8, Size=0x210) returned 0x4131a8 [0104.402] GetProcessHeap () returned 0x400000 [0104.402] RtlAllocateHeap (HeapHandle=0x400000, Flags=0x8, Size=0x5a) returned 0x4133c0 [0104.402] _wcsnicmp (_String1="vssa", _String2="cmd ", _MaxCount=0x4) returned 19 [0104.403] GetProcessHeap () returned 0x400000 [0104.403] RtlAllocateHeap (HeapHandle=0x400000, Flags=0x8, Size=0x418) returned 0x4007f0 [0104.403] SetErrorMode (uMode=0x0) returned 0x0 [0104.403] SetErrorMode (uMode=0x1) returned 0x0 [0104.403] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x4007f8, lpFilePart=0x38f060 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop", lpFilePart=0x38f060*="Desktop") returned 0x1a [0104.403] SetErrorMode (uMode=0x0) returned 0x1 [0104.403] GetProcessHeap () returned 0x400000 [0104.403] RtlReAllocateHeap (Heap=0x400000, Flags=0x0, Ptr=0x4007f0, Size=0x58) returned 0x4007f0 [0104.403] GetProcessHeap () returned 0x400000 [0104.403] RtlSizeHeap (HeapHandle=0x400000, Flags=0x0, MemoryPointer=0x4007f0) returned 0x58 [0104.403] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a160640, nSize=0x2000 | out: lpBuffer="") returned 0x8f [0104.403] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0104.403] GetProcessHeap () returned 0x400000 [0104.403] RtlAllocateHeap (HeapHandle=0x400000, Flags=0x8, Size=0x162) returned 0x413428 [0104.403] GetProcessHeap () returned 0x400000 [0104.403] RtlAllocateHeap (HeapHandle=0x400000, Flags=0x8, Size=0x2bc) returned 0x400850 [0104.410] GetProcessHeap () returned 0x400000 [0104.410] RtlReAllocateHeap (Heap=0x400000, Flags=0x0, Ptr=0x400850, Size=0x164) returned 0x400850 [0104.410] GetProcessHeap () returned 0x400000 [0104.410] RtlSizeHeap (HeapHandle=0x400000, Flags=0x0, MemoryPointer=0x400850) returned 0x164 [0104.410] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a160640, nSize=0x2000 | out: lpBuffer="") returned 0x35 [0104.410] GetProcessHeap () returned 0x400000 [0104.410] RtlAllocateHeap (HeapHandle=0x400000, Flags=0x8, Size=0xe0) returned 0x413598 [0104.410] GetProcessHeap () returned 0x400000 [0104.410] RtlReAllocateHeap (Heap=0x400000, Flags=0x0, Ptr=0x413598, Size=0x76) returned 0x413598 [0104.410] GetProcessHeap () returned 0x400000 [0104.410] RtlSizeHeap (HeapHandle=0x400000, Flags=0x0, MemoryPointer=0x413598) returned 0x76 [0104.413] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0104.413] FindFirstFileExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\vssadmin.exe", fInfoLevelId=0x1, lpFindFileData=0x38edfc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x38edfc) returned 0xffffffff [0104.413] GetLastError () returned 0x2 [0104.413] FindFirstFileExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\vssadmin.exe.*", fInfoLevelId=0x1, lpFindFileData=0x38eddc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x38eddc) returned 0xffffffff [0104.413] GetLastError () returned 0x2 [0104.413] FindFirstFileExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\vssadmin.exe", fInfoLevelId=0x1, lpFindFileData=0x38eddc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x38eddc) returned 0xffffffff [0104.413] GetLastError () returned 0x2 [0104.413] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0104.413] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\vssadmin.exe", fInfoLevelId=0x1, lpFindFileData=0x38edfc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x38edfc) returned 0x413618 [0104.414] GetProcessHeap () returned 0x400000 [0104.414] RtlAllocateHeap (HeapHandle=0x400000, Flags=0x0, Size=0x14) returned 0x413658 [0104.414] FindClose (in: hFindFile=0x413618 | out: hFindFile=0x413618) returned 1 [0104.414] _wcsicmp (_String1=".exe", _String2=".CMD") returned 2 [0104.414] _wcsicmp (_String1=".exe", _String2=".BAT") returned 3 [0104.414] GetConsoleTitleW (in: lpConsoleTitle=0x38f2d4, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0104.414] InitializeProcThreadAttributeList (in: lpAttributeList=0x38f15c, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x38f224 | out: lpAttributeList=0x38f15c, lpSize=0x38f224) returned 1 [0104.414] UpdateProcThreadAttribute (in: lpAttributeList=0x38f15c, dwFlags=0x0, Attribute=0x60001, lpValue=0x38f21c, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x38f15c, lpPreviousValue=0x0) returned 1 [0104.414] GetStartupInfoW (in: lpStartupInfo=0x38f118 | out: lpStartupInfo=0x38f118*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x338, hStdError=0x0)) [0104.414] GetProcessHeap () returned 0x400000 [0104.414] RtlAllocateHeap (HeapHandle=0x400000, Flags=0x8, Size=0x18) returned 0x413618 [0104.414] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38 [0104.414] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2 [0104.414] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2 [0104.414] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0104.414] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0104.414] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0104.414] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3 [0104.414] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3 [0104.415] _wcsnicmp (_String1="COPYCMD", _String2="FP_NO_H", _MaxCount=0x7) returned -3 [0104.415] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5 [0104.415] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5 [0104.418] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9 [0104.418] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9 [0104.418] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11 [0104.418] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12 [0104.418] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13 [0104.418] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13 [0104.418] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0104.419] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0104.419] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0104.419] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0104.419] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0104.419] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0104.419] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0104.419] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0104.419] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0104.419] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13 [0104.419] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13 [0104.419] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13 [0104.419] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16 [0104.419] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16 [0104.419] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17 [0104.419] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17 [0104.419] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0104.419] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18 [0104.419] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18 [0104.419] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20 [0104.419] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20 [0104.419] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20 [0104.419] GetProcessHeap () returned 0x400000 [0104.419] HeapFree (in: hHeap=0x400000, dwFlags=0x0, lpMem=0x413618 | out: hHeap=0x400000) returned 1 [0104.419] GetProcessHeap () returned 0x400000 [0104.419] RtlAllocateHeap (HeapHandle=0x400000, Flags=0x8, Size=0xa) returned 0x40f818 [0104.419] lstrcmpW (lpString1="\\vssadmin.exe", lpString2="\\XCOPY.EXE") returned -1 [0104.422] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\vssadmin.exe", lpCommandLine="vssadmin.exe delete shadows /all /quiet", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\kEecfMwgj\\Desktop", lpStartupInfo=0x38f1b8*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="vssadmin.exe delete shadows /all /quiet", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x38f204 | out: lpCommandLine="vssadmin.exe delete shadows /all /quiet", lpProcessInformation=0x38f204*(hProcess=0x80, hThread=0x7c, dwProcessId=0xe2c, dwThreadId=0xe30)) returned 1 [0104.446] CloseHandle (hObject=0x7c) returned 1 [0104.446] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1 [0104.446] GetProcessHeap () returned 0x400000 [0104.446] HeapFree (in: hHeap=0x400000, dwFlags=0x0, lpMem=0x414d80 | out: hHeap=0x400000) returned 1 [0104.446] GetEnvironmentStringsW () returned 0x414210* [0104.446] GetProcessHeap () returned 0x400000 [0104.446] RtlAllocateHeap (HeapHandle=0x400000, Flags=0x8, Size=0xb64) returned 0x414d80 [0104.446] FreeEnvironmentStringsW (penv=0x414210) returned 1 [0104.446] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0 [0112.403] GetExitCodeProcess (in: hProcess=0x80, lpExitCode=0x38f0f8 | out: lpExitCode=0x38f0f8*=0x2) returned 1 [0112.403] CloseHandle (hObject=0x80) returned 1 [0112.403] _vsnwprintf (in: _Buffer=0x38f240, _BufferCount=0x13, _Format="%08X", _ArgList=0x38f104 | out: _Buffer="00000002") returned 8 [0112.404] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000002") returned 1 [0112.404] GetProcessHeap () returned 0x400000 [0112.404] HeapFree (in: hHeap=0x400000, dwFlags=0x0, lpMem=0x414d80 | out: hHeap=0x400000) returned 1 [0112.404] GetEnvironmentStringsW () returned 0x414210* [0112.404] GetProcessHeap () returned 0x400000 [0112.404] RtlAllocateHeap (HeapHandle=0x400000, Flags=0x8, Size=0xb8a) returned 0x418488 [0112.404] FreeEnvironmentStringsW (penv=0x414210) returned 1 [0112.404] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1 [0112.404] GetProcessHeap () returned 0x400000 [0112.404] HeapFree (in: hHeap=0x400000, dwFlags=0x0, lpMem=0x418488 | out: hHeap=0x400000) returned 1 [0112.404] GetEnvironmentStringsW () returned 0x414210* [0112.404] GetProcessHeap () returned 0x400000 [0112.404] RtlAllocateHeap (HeapHandle=0x400000, Flags=0x8, Size=0xb8a) returned 0x418488 [0112.404] FreeEnvironmentStringsW (penv=0x414210) returned 1 [0112.404] GetProcessHeap () returned 0x400000 [0112.404] HeapFree (in: hHeap=0x400000, dwFlags=0x0, lpMem=0x40f818 | out: hHeap=0x400000) returned 1 [0112.404] DeleteProcThreadAttributeList (in: lpAttributeList=0x38f15c | out: lpAttributeList=0x38f15c) [0112.404] _get_osfhandle (_FileHandle=1) returned 0x338 [0112.405] SetConsoleMode (hConsoleHandle=0x338, dwMode=0x0) returned 0 [0112.405] _get_osfhandle (_FileHandle=1) returned 0x338 [0112.405] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x4a1541ac | out: lpMode=0x4a1541ac) returned 0 [0112.405] _get_osfhandle (_FileHandle=0) returned 0xfffffffe [0112.405] GetConsoleMode (in: hConsoleHandle=0xfffffffe, lpMode=0x4a1541b0 | out: lpMode=0x4a1541b0) returned 1 [0112.406] _get_osfhandle (_FileHandle=0) returned 0xfffffffe [0112.406] SetConsoleMode (hConsoleHandle=0xfffffffe, dwMode=0x7) returned 0 [0112.406] SetConsoleInputExeNameW () returned 0x1 [0112.406] GetConsoleOutputCP () returned 0x1b5 [0112.406] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a154260 | out: lpCPInfo=0x4a154260) returned 1 [0112.406] SetThreadUILanguage (LangId=0x0) returned 0x409 [0112.406] exit (_Code=2) Process: id = "6" image_name = "vssadmin.exe" filename = "c:\\windows\\syswow64\\vssadmin.exe" page_root = "0x3a8c6000" os_pid = "0xe2c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0xe18" cmd_line = "vssadmin.exe delete shadows /all /quiet" cur_dir = "C:\\Users\\kEecfMwgj\\Desktop\\" os_username = "Q9IATRKPRH\\kEecfMwgj" bitness = "32" os_groups = "Q9IATRKPRH\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e32c" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 89 os_tid = 0xe30 Thread: id = 90 os_tid = 0xe34 Thread: id = 91 os_tid = 0xe38 Thread: id = 92 os_tid = 0xe3c Thread: id = 93 os_tid = 0xe40 Process: id = "7" image_name = "cmd.exe" filename = "c:\\windows\\syswow64\\cmd.exe" page_root = "0x3a05c000" os_pid = "0xe4c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0xdb0" cmd_line = "\"cmd.exe\" /c vssadmin.exe delete shadows /all /quiet" cur_dir = "C:\\Users\\kEecfMwgj\\Desktop\\" os_username = "Q9IATRKPRH\\kEecfMwgj" bitness = "32" os_groups = "Q9IATRKPRH\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e32c" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 94 os_tid = 0xe50 [0111.160] GetProcAddress (hModule=0x77350000, lpProcName="SetConsoleInputExeNameW") returned 0x7737a79d [0111.160] GetProcessHeap () returned 0x2c0000 [0111.160] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x400a) returned 0x2d58f0 [0111.160] GetProcessHeap () returned 0x2c0000 [0111.160] HeapFree (in: hHeap=0x2c0000, dwFlags=0x0, lpMem=0x2d58f0 | out: hHeap=0x2c0000) returned 1 [0111.161] _wcsicmp (_String1="vssadmin.exe", _String2=")") returned 77 [0111.161] _wcsicmp (_String1="FOR", _String2="vssadmin.exe") returned -16 [0111.161] _wcsicmp (_String1="FOR/?", _String2="vssadmin.exe") returned -16 [0111.161] _wcsicmp (_String1="IF", _String2="vssadmin.exe") returned -13 [0111.161] _wcsicmp (_String1="IF/?", _String2="vssadmin.exe") returned -13 [0111.161] _wcsicmp (_String1="REM", _String2="vssadmin.exe") returned -4 [0111.161] _wcsicmp (_String1="REM/?", _String2="vssadmin.exe") returned -4 [0111.161] GetProcessHeap () returned 0x2c0000 [0111.161] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x58) returned 0x2d30d0 [0111.161] GetProcessHeap () returned 0x2c0000 [0111.161] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x22) returned 0x2d3130 [0111.162] GetProcessHeap () returned 0x2c0000 [0111.162] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x40) returned 0x2d3160 [0111.163] GetConsoleTitleW (in: lpConsoleTitle=0x2af770, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0111.164] GetFileAttributesW (lpFileName="vssadmin.exe" (normalized: "c:\\users\\keecfmwgj\\desktop\\vssadmin.exe")) returned 0xffffffff [0111.164] _wcsicmp (_String1="vssadmin", _String2="DIR") returned 18 [0111.164] _wcsicmp (_String1="vssadmin", _String2="ERASE") returned 17 [0111.164] _wcsicmp (_String1="vssadmin", _String2="DEL") returned 18 [0111.164] _wcsicmp (_String1="vssadmin", _String2="TYPE") returned 2 [0111.164] _wcsicmp (_String1="vssadmin", _String2="COPY") returned 19 [0111.164] _wcsicmp (_String1="vssadmin", _String2="CD") returned 19 [0111.164] _wcsicmp (_String1="vssadmin", _String2="CHDIR") returned 19 [0111.164] _wcsicmp (_String1="vssadmin", _String2="RENAME") returned 4 [0111.164] _wcsicmp (_String1="vssadmin", _String2="REN") returned 4 [0111.164] _wcsicmp (_String1="vssadmin", _String2="ECHO") returned 17 [0111.164] _wcsicmp (_String1="vssadmin", _String2="SET") returned 3 [0111.164] _wcsicmp (_String1="vssadmin", _String2="PAUSE") returned 6 [0111.164] _wcsicmp (_String1="vssadmin", _String2="DATE") returned 18 [0111.164] _wcsicmp (_String1="vssadmin", _String2="TIME") returned 2 [0111.164] _wcsicmp (_String1="vssadmin", _String2="PROMPT") returned 6 [0111.164] _wcsicmp (_String1="vssadmin", _String2="MD") returned 9 [0111.164] _wcsicmp (_String1="vssadmin", _String2="MKDIR") returned 9 [0111.164] _wcsicmp (_String1="vssadmin", _String2="RD") returned 4 [0111.164] _wcsicmp (_String1="vssadmin", _String2="RMDIR") returned 4 [0111.164] _wcsicmp (_String1="vssadmin", _String2="PATH") returned 6 [0111.164] _wcsicmp (_String1="vssadmin", _String2="GOTO") returned 15 [0111.164] _wcsicmp (_String1="vssadmin", _String2="SHIFT") returned 3 [0111.164] _wcsicmp (_String1="vssadmin", _String2="CLS") returned 19 [0111.164] _wcsicmp (_String1="vssadmin", _String2="CALL") returned 19 [0111.164] _wcsicmp (_String1="vssadmin", _String2="VERIFY") returned 14 [0111.164] _wcsicmp (_String1="vssadmin", _String2="VER") returned 14 [0111.164] _wcsicmp (_String1="vssadmin", _String2="VOL") returned 4 [0111.164] _wcsicmp (_String1="vssadmin", _String2="EXIT") returned 17 [0111.164] _wcsicmp (_String1="vssadmin", _String2="SETLOCAL") returned 3 [0111.164] _wcsicmp (_String1="vssadmin", _String2="ENDLOCAL") returned 17 [0111.164] _wcsicmp (_String1="vssadmin", _String2="TITLE") returned 2 [0111.165] _wcsicmp (_String1="vssadmin", _String2="START") returned 3 [0111.165] _wcsicmp (_String1="vssadmin", _String2="DPATH") returned 18 [0111.165] _wcsicmp (_String1="vssadmin", _String2="KEYS") returned 11 [0111.165] _wcsicmp (_String1="vssadmin", _String2="MOVE") returned 9 [0111.165] _wcsicmp (_String1="vssadmin", _String2="PUSHD") returned 6 [0111.165] _wcsicmp (_String1="vssadmin", _String2="POPD") returned 6 [0111.165] _wcsicmp (_String1="vssadmin", _String2="ASSOC") returned 21 [0111.165] _wcsicmp (_String1="vssadmin", _String2="FTYPE") returned 16 [0111.165] _wcsicmp (_String1="vssadmin", _String2="BREAK") returned 20 [0111.165] _wcsicmp (_String1="vssadmin", _String2="COLOR") returned 19 [0111.165] _wcsicmp (_String1="vssadmin", _String2="MKLINK") returned 9 [0111.165] _wcsicmp (_String1="vssadmin", _String2="DIR") returned 18 [0111.165] _wcsicmp (_String1="vssadmin", _String2="ERASE") returned 17 [0111.165] _wcsicmp (_String1="vssadmin", _String2="DEL") returned 18 [0111.165] _wcsicmp (_String1="vssadmin", _String2="TYPE") returned 2 [0111.165] _wcsicmp (_String1="vssadmin", _String2="COPY") returned 19 [0111.165] _wcsicmp (_String1="vssadmin", _String2="CD") returned 19 [0111.165] _wcsicmp (_String1="vssadmin", _String2="CHDIR") returned 19 [0111.165] _wcsicmp (_String1="vssadmin", _String2="RENAME") returned 4 [0111.165] _wcsicmp (_String1="vssadmin", _String2="REN") returned 4 [0111.165] _wcsicmp (_String1="vssadmin", _String2="ECHO") returned 17 [0111.165] _wcsicmp (_String1="vssadmin", _String2="SET") returned 3 [0111.165] _wcsicmp (_String1="vssadmin", _String2="PAUSE") returned 6 [0111.165] _wcsicmp (_String1="vssadmin", _String2="DATE") returned 18 [0111.165] _wcsicmp (_String1="vssadmin", _String2="TIME") returned 2 [0111.165] _wcsicmp (_String1="vssadmin", _String2="PROMPT") returned 6 [0111.165] _wcsicmp (_String1="vssadmin", _String2="MD") returned 9 [0111.165] _wcsicmp (_String1="vssadmin", _String2="MKDIR") returned 9 [0111.165] _wcsicmp (_String1="vssadmin", _String2="RD") returned 4 [0111.165] _wcsicmp (_String1="vssadmin", _String2="RMDIR") returned 4 [0111.165] _wcsicmp (_String1="vssadmin", _String2="PATH") returned 6 [0111.165] _wcsicmp (_String1="vssadmin", _String2="GOTO") returned 15 [0111.166] _wcsicmp (_String1="vssadmin", _String2="SHIFT") returned 3 [0111.166] _wcsicmp (_String1="vssadmin", _String2="CLS") returned 19 [0111.166] _wcsicmp (_String1="vssadmin", _String2="CALL") returned 19 [0111.166] _wcsicmp (_String1="vssadmin", _String2="VERIFY") returned 14 [0111.166] _wcsicmp (_String1="vssadmin", _String2="VER") returned 14 [0111.166] _wcsicmp (_String1="vssadmin", _String2="VOL") returned 4 [0111.166] _wcsicmp (_String1="vssadmin", _String2="EXIT") returned 17 [0111.166] _wcsicmp (_String1="vssadmin", _String2="SETLOCAL") returned 3 [0111.166] _wcsicmp (_String1="vssadmin", _String2="ENDLOCAL") returned 17 [0111.166] _wcsicmp (_String1="vssadmin", _String2="TITLE") returned 2 [0111.166] _wcsicmp (_String1="vssadmin", _String2="START") returned 3 [0111.166] _wcsicmp (_String1="vssadmin", _String2="DPATH") returned 18 [0111.166] _wcsicmp (_String1="vssadmin", _String2="KEYS") returned 11 [0111.166] _wcsicmp (_String1="vssadmin", _String2="MOVE") returned 9 [0111.166] _wcsicmp (_String1="vssadmin", _String2="PUSHD") returned 6 [0111.166] _wcsicmp (_String1="vssadmin", _String2="POPD") returned 6 [0111.166] _wcsicmp (_String1="vssadmin", _String2="ASSOC") returned 21 [0111.166] _wcsicmp (_String1="vssadmin", _String2="FTYPE") returned 16 [0111.166] _wcsicmp (_String1="vssadmin", _String2="BREAK") returned 20 [0111.166] _wcsicmp (_String1="vssadmin", _String2="COLOR") returned 19 [0111.166] _wcsicmp (_String1="vssadmin", _String2="MKLINK") returned 9 [0111.166] _wcsicmp (_String1="vssadmin", _String2="FOR") returned 16 [0111.166] _wcsicmp (_String1="vssadmin", _String2="IF") returned 13 [0111.166] _wcsicmp (_String1="vssadmin", _String2="REM") returned 4 [0111.167] GetProcessHeap () returned 0x2c0000 [0111.167] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x210) returned 0x2d31a8 [0111.167] GetProcessHeap () returned 0x2c0000 [0111.167] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x5a) returned 0x2d33c0 [0111.167] _wcsnicmp (_String1="vssa", _String2="cmd ", _MaxCount=0x4) returned 19 [0111.168] GetProcessHeap () returned 0x2c0000 [0111.168] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x418) returned 0x2c07f0 [0111.168] SetErrorMode (uMode=0x0) returned 0x0 [0111.168] SetErrorMode (uMode=0x1) returned 0x0 [0111.168] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x2c07f8, lpFilePart=0x2af290 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop", lpFilePart=0x2af290*="Desktop") returned 0x1a [0111.168] SetErrorMode (uMode=0x0) returned 0x1 [0111.168] GetProcessHeap () returned 0x2c0000 [0111.168] RtlReAllocateHeap (Heap=0x2c0000, Flags=0x0, Ptr=0x2c07f0, Size=0x58) returned 0x2c07f0 [0111.168] GetProcessHeap () returned 0x2c0000 [0111.168] RtlSizeHeap (HeapHandle=0x2c0000, Flags=0x0, MemoryPointer=0x2c07f0) returned 0x58 [0111.168] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a160640, nSize=0x2000 | out: lpBuffer="") returned 0x8f [0111.168] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0111.169] GetProcessHeap () returned 0x2c0000 [0111.169] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x162) returned 0x2d3428 [0111.169] GetProcessHeap () returned 0x2c0000 [0111.169] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x2bc) returned 0x2c0850 [0111.176] GetProcessHeap () returned 0x2c0000 [0111.176] RtlReAllocateHeap (Heap=0x2c0000, Flags=0x0, Ptr=0x2c0850, Size=0x164) returned 0x2c0850 [0111.176] GetProcessHeap () returned 0x2c0000 [0111.177] RtlSizeHeap (HeapHandle=0x2c0000, Flags=0x0, MemoryPointer=0x2c0850) returned 0x164 [0111.177] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a160640, nSize=0x2000 | out: lpBuffer="") returned 0x35 [0111.177] GetProcessHeap () returned 0x2c0000 [0111.177] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0xe0) returned 0x2d3598 [0111.177] GetProcessHeap () returned 0x2c0000 [0111.177] RtlReAllocateHeap (Heap=0x2c0000, Flags=0x0, Ptr=0x2d3598, Size=0x76) returned 0x2d3598 [0111.177] GetProcessHeap () returned 0x2c0000 [0111.177] RtlSizeHeap (HeapHandle=0x2c0000, Flags=0x0, MemoryPointer=0x2d3598) returned 0x76 [0111.178] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0111.178] FindFirstFileExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\vssadmin.exe", fInfoLevelId=0x1, lpFindFileData=0x2af02c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2af02c) returned 0xffffffff [0111.178] GetLastError () returned 0x2 [0111.178] FindFirstFileExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\vssadmin.exe.*", fInfoLevelId=0x1, lpFindFileData=0x2af00c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2af00c) returned 0xffffffff [0111.179] GetLastError () returned 0x2 [0111.179] FindFirstFileExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\vssadmin.exe", fInfoLevelId=0x1, lpFindFileData=0x2af00c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2af00c) returned 0xffffffff [0111.179] GetLastError () returned 0x2 [0111.179] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0111.179] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\vssadmin.exe", fInfoLevelId=0x1, lpFindFileData=0x2af02c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2af02c) returned 0x2d3618 [0111.179] GetProcessHeap () returned 0x2c0000 [0111.179] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x0, Size=0x14) returned 0x2d3658 [0111.179] FindClose (in: hFindFile=0x2d3618 | out: hFindFile=0x2d3618) returned 1 [0111.180] _wcsicmp (_String1=".exe", _String2=".CMD") returned 2 [0111.180] _wcsicmp (_String1=".exe", _String2=".BAT") returned 3 [0111.180] GetConsoleTitleW (in: lpConsoleTitle=0x2af504, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0111.216] InitializeProcThreadAttributeList (in: lpAttributeList=0x2af38c, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x2af454 | out: lpAttributeList=0x2af38c, lpSize=0x2af454) returned 1 [0111.216] UpdateProcThreadAttribute (in: lpAttributeList=0x2af38c, dwFlags=0x0, Attribute=0x60001, lpValue=0x2af44c, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x2af38c, lpPreviousValue=0x0) returned 1 [0111.216] GetStartupInfoW (in: lpStartupInfo=0x2af348 | out: lpStartupInfo=0x2af348*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x360, hStdError=0x0)) [0111.216] GetProcessHeap () returned 0x2c0000 [0111.216] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x18) returned 0x2d3618 [0111.216] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38 [0111.216] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2 [0111.216] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2 [0111.217] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0111.217] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0111.217] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0111.217] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3 [0111.217] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3 [0111.217] _wcsnicmp (_String1="COPYCMD", _String2="FP_NO_H", _MaxCount=0x7) returned -3 [0111.217] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5 [0111.217] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5 [0111.217] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9 [0111.217] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9 [0111.217] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11 [0111.217] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12 [0111.217] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13 [0111.217] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13 [0111.217] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0111.217] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0111.217] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0111.217] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0111.217] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0111.217] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0111.217] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0111.217] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0111.217] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0111.217] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13 [0111.217] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13 [0111.217] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13 [0111.217] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16 [0111.217] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16 [0111.217] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17 [0111.217] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17 [0111.217] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0111.217] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18 [0111.218] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18 [0111.218] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20 [0111.218] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20 [0111.218] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20 [0111.218] GetProcessHeap () returned 0x2c0000 [0111.218] HeapFree (in: hHeap=0x2c0000, dwFlags=0x0, lpMem=0x2d3618 | out: hHeap=0x2c0000) returned 1 [0111.218] GetProcessHeap () returned 0x2c0000 [0111.218] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0xa) returned 0x2cf818 [0111.218] lstrcmpW (lpString1="\\vssadmin.exe", lpString2="\\XCOPY.EXE") returned -1 [0111.436] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\vssadmin.exe", lpCommandLine="vssadmin.exe delete shadows /all /quiet", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\kEecfMwgj\\Desktop", lpStartupInfo=0x2af3e8*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="vssadmin.exe delete shadows /all /quiet", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2af434 | out: lpCommandLine="vssadmin.exe delete shadows /all /quiet", lpProcessInformation=0x2af434*(hProcess=0x80, hThread=0x7c, dwProcessId=0xe78, dwThreadId=0xe7c)) returned 1 [0111.440] CloseHandle (hObject=0x7c) returned 1 [0111.440] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1 [0111.440] GetProcessHeap () returned 0x2c0000 [0111.440] HeapFree (in: hHeap=0x2c0000, dwFlags=0x0, lpMem=0x2d4d80 | out: hHeap=0x2c0000) returned 1 [0111.440] GetEnvironmentStringsW () returned 0x2d4210* [0111.441] GetProcessHeap () returned 0x2c0000 [0111.441] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0xb64) returned 0x2d4d80 [0111.441] FreeEnvironmentStringsW (penv=0x2d4210) returned 1 [0111.441] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0 [0112.672] GetExitCodeProcess (in: hProcess=0x80, lpExitCode=0x2af328 | out: lpExitCode=0x2af328*=0x2) returned 1 [0112.673] CloseHandle (hObject=0x80) returned 1 [0112.673] _vsnwprintf (in: _Buffer=0x2af470, _BufferCount=0x13, _Format="%08X", _ArgList=0x2af334 | out: _Buffer="00000002") returned 8 [0112.673] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000002") returned 1 [0112.673] GetProcessHeap () returned 0x2c0000 [0112.673] HeapFree (in: hHeap=0x2c0000, dwFlags=0x0, lpMem=0x2d4d80 | out: hHeap=0x2c0000) returned 1 [0112.673] GetEnvironmentStringsW () returned 0x2d4210* [0112.673] GetProcessHeap () returned 0x2c0000 [0112.673] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0xb8a) returned 0x2d8488 [0112.673] FreeEnvironmentStringsW (penv=0x2d4210) returned 1 [0112.673] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1 [0112.673] GetProcessHeap () returned 0x2c0000 [0112.673] HeapFree (in: hHeap=0x2c0000, dwFlags=0x0, lpMem=0x2d8488 | out: hHeap=0x2c0000) returned 1 [0112.673] GetEnvironmentStringsW () returned 0x2d4210* [0112.673] GetProcessHeap () returned 0x2c0000 [0112.673] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0xb8a) returned 0x2d8488 [0112.673] FreeEnvironmentStringsW (penv=0x2d4210) returned 1 [0112.673] GetProcessHeap () returned 0x2c0000 [0112.674] HeapFree (in: hHeap=0x2c0000, dwFlags=0x0, lpMem=0x2cf818 | out: hHeap=0x2c0000) returned 1 [0112.674] DeleteProcThreadAttributeList (in: lpAttributeList=0x2af38c | out: lpAttributeList=0x2af38c) [0112.674] _get_osfhandle (_FileHandle=1) returned 0x360 [0112.674] SetConsoleMode (hConsoleHandle=0x360, dwMode=0x0) returned 0 [0112.674] _get_osfhandle (_FileHandle=1) returned 0x360 [0112.674] GetConsoleMode (in: hConsoleHandle=0x360, lpMode=0x4a1541ac | out: lpMode=0x4a1541ac) returned 0 [0112.674] _get_osfhandle (_FileHandle=0) returned 0xfffffffe [0112.674] GetConsoleMode (in: hConsoleHandle=0xfffffffe, lpMode=0x4a1541b0 | out: lpMode=0x4a1541b0) returned 1 [0112.675] _get_osfhandle (_FileHandle=0) returned 0xfffffffe [0112.675] SetConsoleMode (hConsoleHandle=0xfffffffe, dwMode=0x7) returned 0 [0112.675] SetConsoleInputExeNameW () returned 0x1 [0112.675] GetConsoleOutputCP () returned 0x1b5 [0112.675] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a154260 | out: lpCPInfo=0x4a154260) returned 1 [0112.675] SetThreadUILanguage (LangId=0x0) returned 0x409 [0112.675] exit (_Code=2) Process: id = "8" image_name = "vssadmin.exe" filename = "c:\\windows\\syswow64\\vssadmin.exe" page_root = "0x3a2fb000" os_pid = "0xe78" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "7" os_parent_pid = "0xe4c" cmd_line = "vssadmin.exe delete shadows /all /quiet" cur_dir = "C:\\Users\\kEecfMwgj\\Desktop\\" os_username = "Q9IATRKPRH\\kEecfMwgj" bitness = "32" os_groups = "Q9IATRKPRH\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e32c" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 102 os_tid = 0xe7c Thread: id = 103 os_tid = 0xe80 Thread: id = 105 os_tid = 0xe8c Thread: id = 106 os_tid = 0xe90 Thread: id = 107 os_tid = 0xe94 Process: id = "9" image_name = "vssvc.exe" filename = "c:\\windows\\system32\\vssvc.exe" page_root = "0x37e19000" os_pid = "0xe44" os_integrity_level = "0x4000" os_privileges = "0xe60b7e890" monitor_reason = "rpc_server" parent_id = "6" os_parent_pid = "0x1c0" cmd_line = "C:\\Windows\\system32\\vssvc.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\VSS" [0xe], "NT AUTHORITY\\Logon Session 00000000:0005f603" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 95 os_tid = 0xe74 Thread: id = 96 os_tid = 0xe70 Thread: id = 97 os_tid = 0xe68 Thread: id = 98 os_tid = 0xe5c [0112.334] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0xa7d920 | out: lpSystemTimeAsFileTime=0xa7d920*(dwLowDateTime=0x7ed9edf0, dwHighDateTime=0x1d763b9)) [0112.334] GetCurrentProcessId () returned 0xe44 [0112.334] GetCurrentThreadId () returned 0xe5c [0112.334] GetTickCount () returned 0xe3282d [0112.334] QueryPerformanceCounter (in: lpPerformanceCount=0xa7d928 | out: lpPerformanceCount=0xa7d928*=1505668138954) returned 1 [0112.334] malloc (_Size=0x100) returned 0x428ee0 [0215.519] free (_Block=0x428ee0) Thread: id = 99 os_tid = 0xe58 Thread: id = 100 os_tid = 0xe54 Thread: id = 101 os_tid = 0xe48 Thread: id = 104 os_tid = 0xe88 Thread: id = 141 os_tid = 0xff4 Thread: id = 172 os_tid = 0x878 Process: id = "10" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x7a876000" os_pid = "0x2c0" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "rpc_server" parent_id = "2" os_parent_pid = "0x1c0" cmd_line = "C:\\Windows\\System32\\svchost.exe -k LocalServiceNetworkRestricted" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\Audiosrv" [0xa], "NT SERVICE\\Dhcp" [0xa], "NT SERVICE\\eventlog" [0xe], "NT SERVICE\\HomeGroupProvider" [0xa], "NT SERVICE\\lmhosts" [0xa], "NT SERVICE\\WPCSvc" [0xa], "NT SERVICE\\wscsvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000b782" [0xc000000f], "LOCAL" [0x7] Thread: id = 117 os_tid = 0xf3c Thread: id = 118 os_tid = 0xf20 Thread: id = 119 os_tid = 0xc0c Thread: id = 120 os_tid = 0x2a0 Thread: id = 121 os_tid = 0x7f8 Thread: id = 122 os_tid = 0x240 Thread: id = 123 os_tid = 0x128 Thread: id = 124 os_tid = 0xc8 Thread: id = 125 os_tid = 0x320 Thread: id = 126 os_tid = 0x5fc Thread: id = 127 os_tid = 0x5f4 Thread: id = 128 os_tid = 0x5f0 Thread: id = 129 os_tid = 0x53c Thread: id = 130 os_tid = 0x454 Thread: id = 131 os_tid = 0x444 Thread: id = 132 os_tid = 0x3b4 Thread: id = 133 os_tid = 0x3ac Thread: id = 134 os_tid = 0x39c Thread: id = 135 os_tid = 0x2f4 Thread: id = 136 os_tid = 0x2f0 Thread: id = 137 os_tid = 0x2cc Thread: id = 138 os_tid = 0x2c4 Thread: id = 139 os_tid = 0xfac Thread: id = 168 os_tid = 0xc88 Thread: id = 173 os_tid = 0xa30 Process: id = "11" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x7817e000" os_pid = "0x330" os_integrity_level = "0x4000" os_privileges = "0x60b16080" monitor_reason = "rpc_server" parent_id = "2" os_parent_pid = "0x1c0" cmd_line = "C:\\Windows\\System32\\svchost.exe -k LocalSystemNetworkRestricted" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\AudioEndpointBuilder" [0xe], "NT SERVICE\\CscService" [0xa], "NT SERVICE\\dot3svc" [0xa], "NT SERVICE\\hidserv" [0xa], "NT SERVICE\\HomeGroupListener" [0xa], "NT SERVICE\\IPBusEnum" [0xa], "NT SERVICE\\Netman" [0xa], "NT SERVICE\\PcaSvc" [0xa], "NT SERVICE\\StorSvc" [0xa], "NT SERVICE\\TabletInputService" [0xa], "NT SERVICE\\TrkWks" [0xa], "NT SERVICE\\UmRdpService" [0xa], "NT SERVICE\\UxSms" [0xa], "NT SERVICE\\WdiSystemHost" [0xa], "NT SERVICE\\Wlansvc" [0xa], "NT SERVICE\\WPDBusEnum" [0xa], "NT SERVICE\\wudfsvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000bc7a" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 142 os_tid = 0xf10 Thread: id = 143 os_tid = 0x7d0 Thread: id = 144 os_tid = 0x328 Thread: id = 145 os_tid = 0x6fc Thread: id = 146 os_tid = 0x68c Thread: id = 147 os_tid = 0x73c Thread: id = 148 os_tid = 0x684 Thread: id = 149 os_tid = 0x680 Thread: id = 150 os_tid = 0x408 Thread: id = 151 os_tid = 0xcc Thread: id = 152 os_tid = 0x3e4 Thread: id = 153 os_tid = 0x3e0 Thread: id = 154 os_tid = 0x3d8 Thread: id = 155 os_tid = 0x3d4 Thread: id = 156 os_tid = 0x3c4 Thread: id = 157 os_tid = 0x3c0 Thread: id = 158 os_tid = 0x38c Thread: id = 159 os_tid = 0x378 Thread: id = 160 os_tid = 0x374 Thread: id = 161 os_tid = 0x344 Thread: id = 162 os_tid = 0x334 Thread: id = 169 os_tid = 0xc8c Process: id = "12" image_name = "windows session manager.exe" filename = "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\windows session manager.exe" page_root = "0x14ce9000" os_pid = "0x4b4" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "autostart" parent_id = "0" os_parent_pid = "0x36c" cmd_line = "\"C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Windows Session Manager.exe\" " cur_dir = "C:\\Windows\\system32\\" os_username = "Q9IATRKPRH\\kEecfMwgj" bitness = "32" os_groups = "Q9IATRKPRH\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e8d9" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 175 os_tid = 0x4b8 [0284.948] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0 [0285.903] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\AppContext", ulOptions=0x0, samDesired=0x20019, phkResult=0x34d9e8 | out: phkResult=0x34d9e8*=0x0) returned 0x2 [0285.904] RegCloseKey (hKey=0x80000002) returned 0x0 [0285.915] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Windows Session Manager.exe", nBufferLength=0x105, lpBuffer=0x34dc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Windows Session Manager.exe", lpFilePart=0x0) returned 0x6c [0285.930] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Windows Session Manager.exe", nBufferLength=0x105, lpBuffer=0x34dc08, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Windows Session Manager.exe", lpFilePart=0x0) returned 0x6c [0285.951] VirtualProtect (in: lpAddress=0x1292000, dwSize=0x3a304, flNewProtect=0x40, lpflOldProtect=0x34e7ec | out: lpflOldProtect=0x34e7ec*=0x80) returned 1 [0288.386] GetEnvironmentVariableW (in: lpName="COR_PROFILER", lpBuffer=0x34e59c, nSize=0x80 | out: lpBuffer="") returned 0x0 [0288.423] GetEnvironmentVariableW (in: lpName="COR_ENABLE_PROFILING", lpBuffer=0x34e59c, nSize=0x80 | out: lpBuffer="") returned 0x0 [0291.813] GetEnvironmentVariableW (in: lpName="userprofile", lpBuffer=0x34e490, nSize=0x80 | out: lpBuffer="") returned 0x12 [0291.815] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x105, lpBuffer=0x34e0dc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0291.816] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0x34e0bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0291.830] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34e5c0) returned 1 [0291.934] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0x34e0a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0291.981] FindFirstFileW (in: lpFileName="C:\\Users\\*", lpFindFileData=0x34e370 | out: lpFindFileData=0x34e370*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x791634f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x791634f0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x430698 [0292.034] FindNextFileW (in: hFindFile=0x430698, lpFindFileData=0x34e378 | out: lpFindFileData=0x34e378*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x791634f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x791634f0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0292.034] FindNextFileW (in: hFindFile=0x430698, lpFindFileData=0x34e378 | out: lpFindFileData=0x34e378*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1 [0292.035] FindNextFileW (in: hFindFile=0x430698, lpFindFileData=0x34e378 | out: lpFindFileData=0x34e378*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x629b4b20, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x629b4b20, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1 [0292.035] FindNextFileW (in: hFindFile=0x430698, lpFindFileData=0x34e378 | out: lpFindFileData=0x34e378*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Default User", cAlternateFileName="DEFAUL~1")) returned 1 [0292.035] FindNextFileW (in: hFindFile=0x430698, lpFindFileData=0x34e378 | out: lpFindFileData=0x34e378*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x286e4016, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x286e4016, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0292.035] FindNextFileW (in: hFindFile=0x430698, lpFindFileData=0x34e378 | out: lpFindFileData=0x34e378*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x791634f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xf29f86d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf29f86d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kEecfMwgj", cAlternateFileName="KEECFM~1")) returned 1 [0292.035] FindNextFileW (in: hFindFile=0x430698, lpFindFileData=0x34e378 | out: lpFindFileData=0x34e378*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Public", cAlternateFileName="")) returned 1 [0292.035] FindNextFileW (in: hFindFile=0x430698, lpFindFileData=0x34e378 | out: lpFindFileData=0x34e378*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0292.035] FindClose (in: hFindFile=0x430698 | out: hFindFile=0x430698) returned 1 [0292.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34e330) returned 1 [0292.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34e590) returned 1 [0292.143] GetUserNameW (in: lpBuffer=0x34e39c, pcbBuffer=0x34e614 | out: lpBuffer="kEecfMwgj", pcbBuffer=0x34e614) returned 1 [0292.318] GetUserNameW (in: lpBuffer=0x34e39c, pcbBuffer=0x34e614 | out: lpBuffer="kEecfMwgj", pcbBuffer=0x34e614) returned 1 [0292.319] GetUserNameW (in: lpBuffer=0x34e39c, pcbBuffer=0x34e614 | out: lpBuffer="kEecfMwgj", pcbBuffer=0x34e614) returned 1 [0292.319] GetUserNameW (in: lpBuffer=0x34e39c, pcbBuffer=0x34e614 | out: lpBuffer="kEecfMwgj", pcbBuffer=0x34e614) returned 1 [0292.320] GetUserNameW (in: lpBuffer=0x34e39c, pcbBuffer=0x34e614 | out: lpBuffer="kEecfMwgj", pcbBuffer=0x34e614) returned 1 [0292.321] GetUserNameW (in: lpBuffer=0x34e39c, pcbBuffer=0x34e614 | out: lpBuffer="kEecfMwgj", pcbBuffer=0x34e614) returned 1 [0292.347] GetUserNameW (in: lpBuffer=0x34e39c, pcbBuffer=0x34e614 | out: lpBuffer="kEecfMwgj", pcbBuffer=0x34e614) returned 1 [0292.350] GetUserNameW (in: lpBuffer=0x34e39c, pcbBuffer=0x34e614 | out: lpBuffer="kEecfMwgj", pcbBuffer=0x34e614) returned 1 [0292.351] GetUserNameW (in: lpBuffer=0x34e39c, pcbBuffer=0x34e614 | out: lpBuffer="kEecfMwgj", pcbBuffer=0x34e614) returned 1 [0292.352] GetUserNameW (in: lpBuffer=0x34e39c, pcbBuffer=0x34e614 | out: lpBuffer="kEecfMwgj", pcbBuffer=0x34e614) returned 1 [0292.389] GetUserNameW (in: lpBuffer=0x34e39c, pcbBuffer=0x34e614 | out: lpBuffer="kEecfMwgj", pcbBuffer=0x34e614) returned 1 [0292.390] GetUserNameW (in: lpBuffer=0x34e39c, pcbBuffer=0x34e614 | out: lpBuffer="kEecfMwgj", pcbBuffer=0x34e614) returned 1 [0294.499] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x238 [0294.505] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x240 [0294.512] SetEvent (hEvent=0x240) returned 1 [0294.549] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x34de7c*=0x238, lpdwindex=0x34dca0 | out: lpdwindex=0x34dca0) returned 0x0 [0294.698] CoGetContextToken (in: pToken=0x34dd54 | out: pToken=0x34dd54) returned 0x0 [0294.699] CoGetContextToken (in: pToken=0x34dcb4 | out: pToken=0x34dcb4) returned 0x0 [0294.700] WbemDefPath:IUnknown:QueryInterface (in: This=0x46d170, riid=0x34dd84*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x34dd80 | out: ppvObject=0x34dd80*=0x46d170) returned 0x0 [0294.700] WbemDefPath:IUnknown:AddRef (This=0x46d170) returned 0x3 [0294.700] WbemDefPath:IUnknown:Release (This=0x46d170) returned 0x2 [0294.703] WbemDefPath:IWbemPath:SetText (This=0x46d170, uMode=0x4, pszPath="//./root/cimv2") returned 0x0 [0294.704] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x46d170, puCount=0x34e5fc | out: puCount=0x34e5fc*=0x2) returned 0x0 [0294.705] WbemDefPath:IWbemPath:GetText (in: This=0x46d170, lFlags=4, puBuffLength=0x34e5f8*=0x0, pszText=0x0 | out: puBuffLength=0x34e5f8*=0xf, pszText=0x0) returned 0x0 [0294.705] WbemDefPath:IWbemPath:GetText (in: This=0x46d170, lFlags=4, puBuffLength=0x34e5f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x34e5f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0294.721] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x34e4a4*=0x2c4, lpdwindex=0x34e35c | out: lpdwindex=0x34e35c) returned 0x0 [0295.339] CoGetContextToken (in: pToken=0x34e2dc | out: pToken=0x34e2dc) returned 0x0 [0295.339] CoGetContextToken (in: pToken=0x34e23c | out: pToken=0x34e23c) returned 0x0 [0295.339] CoGetContextToken (in: pToken=0x34e23c | out: pToken=0x34e23c) returned 0x0 [0295.339] CoGetContextToken (in: pToken=0x34e1dc | out: pToken=0x34e1dc) returned 0x0 [0295.339] IUnknown:QueryInterface (in: This=0x442ef0, riid=0x74f28ae0*(Data1=0x1da, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x34e1b4 | out: ppvObject=0x34e1b4*=0x442f00) returned 0x0 [0295.341] CObjectContext::ContextCallback () returned 0x0 [0295.349] IUnknown:Release (This=0x442f00) returned 0x1 [0295.350] CoUnmarshalInterface (in: pStm=0x46ccb0, riid=0x74d82a54*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x34e230 | out: ppv=0x34e230*=0x4a19a4) returned 0x0 [0295.350] CoMarshalInterface (pStm=0x46ccb0, riid=0x74d82a54*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x4a19a4, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0) returned 0x0 [0295.350] WbemLocator:IUnknown:QueryInterface (in: This=0x4a19a4, riid=0x34e30c*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x34e308 | out: ppvObject=0x34e308*=0x4a4560) returned 0x0 [0295.354] WbemLocator:IUnknown:Release (This=0x4a19a4) returned 0x1 [0295.354] IWbemServices:ExecQuery (in: This=0x4a4560, strQueryLanguage="WQL", strQuery="Select * from Win32_ComputerSystem", lFlags=16, pCtx=0x0, ppEnum=0x34e568 | out: ppEnum=0x34e568*=0x477360) returned 0x0 [0295.400] IUnknown:QueryInterface (in: This=0x477360, riid=0x70d935b4*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x34e33c | out: ppvObject=0x34e33c*=0x477364) returned 0x0 [0295.400] IClientSecurity:QueryBlanket (in: This=0x477364, pProxy=0x477360, pAuthnSvc=0x34e38c, pAuthzSvc=0x34e388, pServerPrincName=0x34e380, pAuthnLevel=0x34e384, pImpLevel=0x34e374, pAuthInfo=0x34e378, pCapabilites=0x34e37c | out: pAuthnSvc=0x34e38c*=0xa, pAuthzSvc=0x34e388*=0x0, pServerPrincName=0x34e380, pAuthnLevel=0x34e384*=0x6, pImpLevel=0x34e374*=0x2, pAuthInfo=0x34e378, pCapabilites=0x34e37c*=0x1) returned 0x0 [0295.400] IUnknown:Release (This=0x477364) returned 0x1 [0295.400] IUnknown:QueryInterface (in: This=0x477360, riid=0x70d935a4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x34e330 | out: ppvObject=0x34e330*=0x4a1a94) returned 0x0 [0295.400] IUnknown:QueryInterface (in: This=0x477360, riid=0x70d935b4*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x34e31c | out: ppvObject=0x34e31c*=0x477364) returned 0x0 [0295.400] IClientSecurity:SetBlanket (This=0x477364, pProxy=0x477360, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0295.419] IUnknown:Release (This=0x477364) returned 0x2 [0295.419] WbemLocator:IUnknown:Release (This=0x4a1a94) returned 0x1 [0295.419] CoTaskMemFree (pv=0x49c1d0) [0295.420] IUnknown:AddRef (This=0x477360) returned 0x2 [0295.420] CoGetContextToken (in: pToken=0x34d85c | out: pToken=0x34d85c) returned 0x0 [0295.420] IUnknown:QueryInterface (in: This=0x442d80, riid=0x74e0b24c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x34d818 | out: ppvObject=0x34d818*=0x442d8c) returned 0x0 [0295.421] IComThreadingInfo:GetCurrentApartmentType (in: This=0x442d8c, pAptType=0x34d854 | out: pAptType=0x34d854*=3) returned 0x0 [0295.421] IUnknown:Release (This=0x442d8c) returned 0x0 [0295.421] CoGetObjectContext (in: riid=0x74d82a54*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x49cd24 | out: ppv=0x49cd24*=0x442d80) returned 0x0 [0295.421] CoGetContextToken (in: pToken=0x34dc6c | out: pToken=0x34dc6c) returned 0x0 [0295.421] IUnknown:QueryInterface (in: This=0x477360, riid=0x74e71aa8*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x34dc08 | out: ppvObject=0x34dc08*=0x4a1a7c) returned 0x0 [0295.421] WbemLocator:IRpcOptions:Query (in: This=0x4a1a7c, pPrx=0x49ccc0, dwProperty=2, pdwValue=0x34dcfc | out: pdwValue=0x34dcfc) returned 0x80004002 [0295.421] WbemLocator:IUnknown:Release (This=0x4a1a7c) returned 0x2 [0295.421] CoGetContextToken (in: pToken=0x34e23c | out: pToken=0x34e23c) returned 0x0 [0295.421] CoGetContextToken (in: pToken=0x34e19c | out: pToken=0x34e19c) returned 0x0 [0295.421] IUnknown:QueryInterface (in: This=0x477360, riid=0x34e26c*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x34e138 | out: ppvObject=0x34e138*=0x477360) returned 0x0 [0295.421] IUnknown:Release (This=0x477360) returned 0x2 [0295.421] WbemLocator:IUnknown:Release (This=0x4a4560) returned 0x0 [0295.422] SysStringLen (param_1=0x0) returned 0x0 [0295.422] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x46d170, puCount=0x34e5b8 | out: puCount=0x34e5b8*=0x2) returned 0x0 [0295.422] WbemDefPath:IWbemPath:GetText (in: This=0x46d170, lFlags=4, puBuffLength=0x34e5b4*=0x0, pszText=0x0 | out: puBuffLength=0x34e5b4*=0xf, pszText=0x0) returned 0x0 [0295.422] WbemDefPath:IWbemPath:GetText (in: This=0x46d170, lFlags=4, puBuffLength=0x34e5b4*=0xf, pszText="00000000000000" | out: puBuffLength=0x34e5b4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0295.425] CoGetContextToken (in: pToken=0x34e3bc | out: pToken=0x34e3bc) returned 0x0 [0295.425] IEnumWbemClassObject:Clone (in: This=0x477360, ppEnum=0x34e5c4 | out: ppEnum=0x34e5c4*=0x4774f0) returned 0x0 [0295.505] IUnknown:QueryInterface (in: This=0x4774f0, riid=0x70d935b4*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x34e42c | out: ppvObject=0x34e42c*=0x4774f4) returned 0x0 [0295.505] IClientSecurity:QueryBlanket (in: This=0x4774f4, pProxy=0x4774f0, pAuthnSvc=0x34e47c, pAuthzSvc=0x34e478, pServerPrincName=0x34e470, pAuthnLevel=0x34e474, pImpLevel=0x34e464, pAuthInfo=0x34e468, pCapabilites=0x34e46c | out: pAuthnSvc=0x34e47c*=0xa, pAuthzSvc=0x34e478*=0x0, pServerPrincName=0x34e470, pAuthnLevel=0x34e474*=0x6, pImpLevel=0x34e464*=0x2, pAuthInfo=0x34e468, pCapabilites=0x34e46c*=0x1) returned 0x0 [0295.505] IUnknown:Release (This=0x4774f4) returned 0x1 [0295.505] IUnknown:QueryInterface (in: This=0x4774f0, riid=0x70d935a4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x34e420 | out: ppvObject=0x34e420*=0x4a19a4) returned 0x0 [0295.506] IUnknown:QueryInterface (in: This=0x4774f0, riid=0x70d935b4*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x34e40c | out: ppvObject=0x34e40c*=0x4774f4) returned 0x0 [0295.506] IClientSecurity:SetBlanket (This=0x4774f4, pProxy=0x4774f0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0295.518] IUnknown:Release (This=0x4774f4) returned 0x2 [0295.519] WbemLocator:IUnknown:Release (This=0x4a19a4) returned 0x1 [0295.519] CoTaskMemFree (pv=0x49c1a0) [0295.519] IUnknown:AddRef (This=0x4774f0) returned 0x2 [0295.519] CoGetContextToken (in: pToken=0x34d93c | out: pToken=0x34d93c) returned 0x0 [0295.519] CoGetContextToken (in: pToken=0x34dd4c | out: pToken=0x34dd4c) returned 0x0 [0295.519] IUnknown:QueryInterface (in: This=0x4774f0, riid=0x74e71aa8*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x34dce8 | out: ppvObject=0x34dce8*=0x4a198c) returned 0x0 [0295.520] WbemLocator:IRpcOptions:Query (in: This=0x4a198c, pPrx=0x49ccf0, dwProperty=2, pdwValue=0x34dddc | out: pdwValue=0x34dddc) returned 0x80004002 [0295.520] WbemLocator:IUnknown:Release (This=0x4a198c) returned 0x2 [0295.520] CoGetContextToken (in: pToken=0x34e31c | out: pToken=0x34e31c) returned 0x0 [0295.520] CoGetContextToken (in: pToken=0x34e27c | out: pToken=0x34e27c) returned 0x0 [0295.520] IUnknown:QueryInterface (in: This=0x4774f0, riid=0x34e34c*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x34e218 | out: ppvObject=0x34e218*=0x4774f0) returned 0x0 [0295.520] IUnknown:Release (This=0x4774f0) returned 0x2 [0295.520] SysStringLen (param_1=0x0) returned 0x0 [0295.521] IEnumWbemClassObject:Reset (This=0x4774f0) returned 0x0 [0295.534] CoTaskMemAlloc (cb=0x4) returned 0x4936c8 [0295.535] IEnumWbemClassObject:Next (in: This=0x4774f0, lTimeout=-1, uCount=0x1, apObjects=0x4936c8, puReturned=0x26f12b8 | out: apObjects=0x4936c8*=0x4a86c0, puReturned=0x26f12b8*=0x1) returned 0x0 [0296.254] IUnknown:QueryInterface (in: This=0x4a86c0, riid=0x74d82a54*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x34dc1c | out: ppvObject=0x34dc1c*=0x4a86c0) returned 0x0 [0296.254] IUnknown:QueryInterface (in: This=0x4a86c0, riid=0x74e71b6c*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x34dbd0 | out: ppvObject=0x34dbd0*=0x0) returned 0x80004002 [0296.254] IUnknown:QueryInterface (in: This=0x4a86c0, riid=0x74e71e84*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x34d9f8 | out: ppvObject=0x34d9f8*=0x0) returned 0x80004002 [0296.254] IUnknown:AddRef (This=0x4a86c0) returned 0x3 [0296.254] IUnknown:QueryInterface (in: This=0x4a86c0, riid=0x74e7182c*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x34d52c | out: ppvObject=0x34d52c*=0x0) returned 0x80004002 [0296.254] IUnknown:QueryInterface (in: This=0x4a86c0, riid=0x74e71764*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x34d4dc | out: ppvObject=0x34d4dc*=0x0) returned 0x80004002 [0296.254] IUnknown:QueryInterface (in: This=0x4a86c0, riid=0x74da1388*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x34d4e8 | out: ppvObject=0x34d4e8*=0x4a86c4) returned 0x0 [0296.255] IMarshal:GetUnmarshalClass (in: This=0x4a86c4, riid=0x74d82a54*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x34d4f0 | out: pCid=0x34d4f0*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0296.255] IUnknown:Release (This=0x4a86c4) returned 0x3 [0296.255] CoGetContextToken (in: pToken=0x34d548 | out: pToken=0x34d548) returned 0x0 [0296.255] CoGetContextToken (in: pToken=0x34d95c | out: pToken=0x34d95c) returned 0x0 [0296.255] IUnknown:QueryInterface (in: This=0x4a86c0, riid=0x74e71aa8*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x34d9dc | out: ppvObject=0x34d9dc*=0x0) returned 0x80004002 [0296.255] IUnknown:Release (This=0x4a86c0) returned 0x2 [0296.255] CoGetContextToken (in: pToken=0x34df44 | out: pToken=0x34df44) returned 0x0 [0296.255] CoGetContextToken (in: pToken=0x34dea4 | out: pToken=0x34dea4) returned 0x0 [0296.255] IUnknown:QueryInterface (in: This=0x4a86c0, riid=0x34df74*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x34df70 | out: ppvObject=0x34df70*=0x4a86c0) returned 0x0 [0296.255] IUnknown:AddRef (This=0x4a86c0) returned 0x4 [0296.255] IUnknown:Release (This=0x4a86c0) returned 0x3 [0296.256] IUnknown:Release (This=0x4a86c0) returned 0x2 [0296.256] CoTaskMemFree (pv=0x4936c8) [0296.257] CoGetContextToken (in: pToken=0x34e2b4 | out: pToken=0x34e2b4) returned 0x0 [0296.257] IUnknown:AddRef (This=0x4a86c0) returned 0x3 [0296.261] IWbemClassObject:Get (in: This=0x4a86c0, wszName="__GENUS", lFlags=0, pVal=0x34e5a0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x34e634*=0, plFlavor=0x34e630*=0 | out: pVal=0x34e5a0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x34e634*=3, plFlavor=0x34e630*=64) returned 0x0 [0296.265] IWbemClassObject:Get (in: This=0x4a86c0, wszName="__PATH", lFlags=0, pVal=0x34e584*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x34e61c*=0, plFlavor=0x34e618*=0 | out: pVal=0x34e584*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\Q9IATRKPRH\\ROOT\\cimv2:Win32_ComputerSystem.Name=\"Q9IATRKPRH\"", varVal2=0x0), pType=0x34e61c*=8, plFlavor=0x34e618*=64) returned 0x0 [0296.267] SysStringByteLen (bstr="\\\\Q9IATRKPRH\\ROOT\\cimv2:Win32_ComputerSystem.Name=\"Q9IATRKPRH\"") returned 0x7c [0296.267] SysStringByteLen (bstr="\\\\Q9IATRKPRH\\ROOT\\cimv2:Win32_ComputerSystem.Name=\"Q9IATRKPRH\"") returned 0x7c [0296.268] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x32c [0296.268] SetEvent (hEvent=0x240) returned 1 [0296.268] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x34e570*=0x32c, lpdwindex=0x34e394 | out: lpdwindex=0x34e394) returned 0x0 [0296.271] CoGetContextToken (in: pToken=0x34e444 | out: pToken=0x34e444) returned 0x0 [0296.271] CoGetContextToken (in: pToken=0x34e3a4 | out: pToken=0x34e3a4) returned 0x0 [0296.271] WbemDefPath:IUnknown:QueryInterface (in: This=0x46d2c0, riid=0x34e474*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x34e470 | out: ppvObject=0x34e470*=0x46d2c0) returned 0x0 [0296.271] WbemDefPath:IUnknown:AddRef (This=0x46d2c0) returned 0x3 [0296.271] WbemDefPath:IUnknown:Release (This=0x46d2c0) returned 0x2 [0296.271] WbemDefPath:IWbemPath:SetText (This=0x46d2c0, uMode=0x4, pszPath="\\\\Q9IATRKPRH\\ROOT\\cimv2:Win32_ComputerSystem.Name=\"Q9IATRKPRH\"") returned 0x0 [0296.271] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x46d170, puCount=0x34e5f0 | out: puCount=0x34e5f0*=0x2) returned 0x0 [0296.271] WbemDefPath:IWbemPath:GetText (in: This=0x46d170, lFlags=4, puBuffLength=0x34e5ec*=0x0, pszText=0x0 | out: puBuffLength=0x34e5ec*=0xf, pszText=0x0) returned 0x0 [0296.271] WbemDefPath:IWbemPath:GetText (in: This=0x46d170, lFlags=4, puBuffLength=0x34e5ec*=0xf, pszText="00000000000000" | out: puBuffLength=0x34e5ec*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0296.275] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x46d170, puCount=0x34e5b8 | out: puCount=0x34e5b8*=0x2) returned 0x0 [0296.275] WbemDefPath:IWbemPath:GetText (in: This=0x46d170, lFlags=4, puBuffLength=0x34e5b4*=0x0, pszText=0x0 | out: puBuffLength=0x34e5b4*=0xf, pszText=0x0) returned 0x0 [0296.275] WbemDefPath:IWbemPath:GetText (in: This=0x46d170, lFlags=4, puBuffLength=0x34e5b4*=0xf, pszText="00000000000000" | out: puBuffLength=0x34e5b4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0296.275] IWbemClassObject:Get (in: This=0x4a86c0, wszName="Manufacturer", lFlags=0, pVal=0x34e5a0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x26f1bdc*=0, plFlavor=0x26f1be0*=0 | out: pVal=0x34e5a0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="HP", varVal2=0x0), pType=0x26f1bdc*=8, plFlavor=0x26f1be0*=0) returned 0x0 [0296.276] SysStringByteLen (bstr="HP") returned 0x4 [0296.276] SysStringByteLen (bstr="HP") returned 0x4 [0296.276] IWbemClassObject:Get (in: This=0x4a86c0, wszName="Manufacturer", lFlags=0, pVal=0x34e5a8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x26f1bdc*=8, plFlavor=0x26f1be0*=0 | out: pVal=0x34e5a8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="HP", varVal2=0x0), pType=0x26f1bdc*=8, plFlavor=0x26f1be0*=0) returned 0x0 [0296.276] SysStringByteLen (bstr="HP") returned 0x4 [0296.276] SysStringByteLen (bstr="HP") returned 0x4 [0296.290] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x46d170, puCount=0x34e5b8 | out: puCount=0x34e5b8*=0x2) returned 0x0 [0296.290] WbemDefPath:IWbemPath:GetText (in: This=0x46d170, lFlags=4, puBuffLength=0x34e5b4*=0x0, pszText=0x0 | out: puBuffLength=0x34e5b4*=0xf, pszText=0x0) returned 0x0 [0296.290] WbemDefPath:IWbemPath:GetText (in: This=0x46d170, lFlags=4, puBuffLength=0x34e5b4*=0xf, pszText="00000000000000" | out: puBuffLength=0x34e5b4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0296.290] IWbemClassObject:Get (in: This=0x4a86c0, wszName="Model", lFlags=0, pVal=0x34e5a0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x26f1d08*=0, plFlavor=0x26f1d0c*=0 | out: pVal=0x34e5a0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="ProLiant DL180 G6", varVal2=0x0), pType=0x26f1d08*=8, plFlavor=0x26f1d0c*=0) returned 0x0 [0296.290] SysStringByteLen (bstr="ProLiant DL180 G6") returned 0x22 [0296.290] SysStringByteLen (bstr="ProLiant DL180 G6") returned 0x22 [0296.290] IWbemClassObject:Get (in: This=0x4a86c0, wszName="Model", lFlags=0, pVal=0x34e5a8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x26f1d08*=8, plFlavor=0x26f1d0c*=0 | out: pVal=0x34e5a8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="ProLiant DL180 G6", varVal2=0x0), pType=0x26f1d08*=8, plFlavor=0x26f1d0c*=0) returned 0x0 [0296.290] SysStringByteLen (bstr="ProLiant DL180 G6") returned 0x22 [0296.290] SysStringByteLen (bstr="ProLiant DL180 G6") returned 0x22 [0296.421] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0296.429] CreatePipe (in: hReadPipe=0x34e2ac, hWritePipe=0x34e2a8, lpPipeAttributes=0x34e22c, nSize=0x0 | out: hReadPipe=0x34e2ac*=0x334, hWritePipe=0x34e2a8*=0x338) returned 1 [0296.431] GetCurrentProcess () returned 0xffffffff [0296.431] GetCurrentProcess () returned 0xffffffff [0296.432] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0x334, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x34e2b0, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x34e2b0*=0x33c) returned 1 [0296.432] CloseHandle (hObject=0x334) returned 1 [0296.432] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0296.434] CoTaskMemAlloc (cb=0x20e) returned 0x4ad890 [0296.434] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4ad890 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0296.434] CoTaskMemFree (pv=0x4ad890) [0296.435] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"cmd.exe\" /c vssadmin.exe delete shadows /all /quiet", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Windows\\system32", lpStartupInfo=0x34e1cc*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x338, hStdError=0x0), lpProcessInformation=0x26f395c | out: lpCommandLine="\"cmd.exe\" /c vssadmin.exe delete shadows /all /quiet", lpProcessInformation=0x26f395c*(hProcess=0x340, hThread=0x334, dwProcessId=0x588, dwThreadId=0x628)) returned 1 [0296.472] CloseHandle (hObject=0x338) returned 1 [0296.475] GetConsoleOutputCP () returned 0x0 [0296.482] GetACP () returned 0x4e4 [0296.550] GetFileType (hFile=0x33c) returned 0x3 [0296.552] CloseHandle (hObject=0x334) returned 1 [0296.862] GetLogicalDrives () returned 0x4 [0296.863] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0x34dec0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0296.867] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0296.972] CoTaskMemAlloc (cb=0x20c) returned 0x4ada28 [0296.972] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0x4ada28 | out: pszPath="C:\\Windows\\system32") returned 0x0 [0296.985] CoTaskMemFree (pv=0x4ada28) [0296.985] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x34e078, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0296.995] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x34e124, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0297.076] EtwEventRegister () returned 0x0 [0297.083] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Windows Session Manager.exe.config", nBufferLength=0x105, lpBuffer=0x34dcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Windows Session Manager.exe.config", lpFilePart=0x0) returned 0x73 [0297.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34df38) returned 1 [0297.084] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Windows Session Manager.exe.config" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\windows session manager.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x34e1fc | out: lpFileInformation=0x34e1fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0297.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34df34) returned 1 [0297.352] GetFullPathNameW (in: lpFileName="C:\\readme.txt", nBufferLength=0x105, lpBuffer=0x34de70, lpFilePart=0x0 | out: lpBuffer="C:\\readme.txt", lpFilePart=0x0) returned 0xd [0297.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34e388) returned 1 [0297.353] CreateFileW (lpFileName="C:\\readme.txt" (normalized: "c:\\readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffff [0297.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34d1a8) returned 1 [0297.579] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0297.580] CreatePipe (in: hReadPipe=0x34e2ac, hWritePipe=0x34e2a8, lpPipeAttributes=0x34e22c, nSize=0x0 | out: hReadPipe=0x34e2ac*=0x364, hWritePipe=0x34e2a8*=0x360) returned 1 [0297.580] GetCurrentProcess () returned 0xffffffff [0297.580] GetCurrentProcess () returned 0xffffffff [0297.580] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0x364, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x34e2b0, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x34e2b0*=0x368) returned 1 [0297.580] CloseHandle (hObject=0x364) returned 1 [0297.581] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0297.581] CoTaskMemAlloc (cb=0x20e) returned 0x4a7f30 [0297.581] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x4a7f30 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0297.581] CoTaskMemFree (pv=0x4a7f30) [0297.581] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"cmd.exe\" /c vssadmin.exe delete shadows /all /quiet", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Windows\\system32", lpStartupInfo=0x34e1cc*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x360, hStdError=0x0), lpProcessInformation=0x2712f98 | out: lpCommandLine="\"cmd.exe\" /c vssadmin.exe delete shadows /all /quiet", lpProcessInformation=0x2712f98*(hProcess=0x36c, hThread=0x364, dwProcessId=0x6bc, dwThreadId=0x6b8)) returned 1 [0297.596] CloseHandle (hObject=0x360) returned 1 [0297.596] GetFileType (hFile=0x368) returned 0x3 [0297.597] CloseHandle (hObject=0x364) returned 1 [0297.748] BCryptGetFipsAlgorithmMode (in: pfEnabled=0x34dea4 | out: pfEnabled=0x34dea4) returned 0x0 [0297.831] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34e0c8) returned 1 [0297.831] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop", nBufferLength=0x105, lpBuffer=0x34dba8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop", lpFilePart=0x0) returned 0x1a [0297.832] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\*", lpFindFileData=0x34de78 | out: lpFindFileData=0x34de78*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x821fd1f0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x821fd1f0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x47de80 [0297.832] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34de80 | out: lpFindFileData=0x34de80*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x821fd1f0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x821fd1f0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0297.832] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34de80 | out: lpFindFileData=0x34de80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ece0710, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7ece0710, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f157050, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8780, dwReserved0=0x0, dwReserved1=0x0, cFileName="-S33.bmp.Poteston", cAlternateFileName="-S33BM~1.POT")) returned 1 [0297.832] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34de80 | out: lpFindFileData=0x34de80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f63fdb0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f63fdb0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f63fdb0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x2620, dwReserved0=0x0, dwReserved1=0x0, cFileName="677aEP3NVPVTqr.jpg.Poteston", cAlternateFileName="677AEP~1.POT")) returned 1 [0297.832] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34de80 | out: lpFindFileData=0x34de80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f9f8010, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f9f8010, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f9f8010, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x13fd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="7h1t7zwQ4ZuOZlBh.pdf.Poteston", cAlternateFileName="7H1T7Z~1.POT")) returned 1 [0297.832] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34de80 | out: lpFindFileData=0x34de80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fc0d350, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7fc0d350, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7fc0d350, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x6110, dwReserved0=0x0, dwReserved1=0x0, cFileName="8KBcW4C3id-XWO3.bmp.Poteston", cAlternateFileName="8KBCW4~1.POT")) returned 1 [0297.832] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34de80 | out: lpFindFileData=0x34de80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9d12120, ftCreationTime.dwHighDateTime=0x1d75823, ftLastAccessTime.dwLowDateTime=0x821fd1f0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x821fd1f0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="9a-Wiva", cAlternateFileName="")) returned 1 [0297.833] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34de80 | out: lpFindFileData=0x34de80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fcf1b90, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7fcf1b90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7fd17cf0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x178a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="aL5T.mp3.Poteston", cAlternateFileName="AL5TMP~1.POT")) returned 1 [0297.833] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34de80 | out: lpFindFileData=0x34de80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fe22690, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7fe22690, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7fe22690, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xa520, dwReserved0=0x0, dwReserved1=0x0, cFileName="bliVjRUgxOohi.mp3.Poteston", cAlternateFileName="BLIVJR~1.POT")) returned 1 [0297.833] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34de80 | out: lpFindFileData=0x34de80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fee0d70, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7fee0d70, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7fee0d70, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x1ea0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cFKKYeu.jpg.Poteston", cAlternateFileName="CFKKYE~1.POT")) returned 1 [0297.833] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34de80 | out: lpFindFileData=0x34de80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ffc55b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7ffc55b0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7ffeb710, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x17c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="d280B.png.Poteston", cAlternateFileName="D280BP~1.POT")) returned 1 [0297.833] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34de80 | out: lpFindFileData=0x34de80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x800cff50, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x800cff50, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x800cff50, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x120, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini.Poteston", cAlternateFileName="DESKTO~1.POT")) returned 1 [0297.833] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34de80 | out: lpFindFileData=0x34de80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x801684d0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x801684d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x8018e630, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x12d70, dwReserved0=0x0, dwReserved1=0x0, cFileName="FdCidZt 3ToEAX.m4a.Poteston", cAlternateFileName="FDCIDZ~1.POT")) returned 1 [0297.833] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34de80 | out: lpFindFileData=0x34de80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8024cd10, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8024cd10, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x8024cd10, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x13f00, dwReserved0=0x0, dwReserved1=0x0, cFileName="g1B2.flv.Poteston", cAlternateFileName="G1B2FL~1.POT")) returned 1 [0297.833] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34de80 | out: lpFindFileData=0x34de80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x803576b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x803576b0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x803576b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x3f10, dwReserved0=0x0, dwReserved1=0x0, cFileName="gXJnC9SLmsW4N3mGiA.mp3.Poteston", cAlternateFileName="GXJNC9~1.POT")) returned 1 [0297.833] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34de80 | out: lpFindFileData=0x34de80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8043bef0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8043bef0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x80462050, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xabf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HkCCIp7G6XkCf6WS7z.ppt.Poteston", cAlternateFileName="HKCCIP~1.POT")) returned 1 [0297.833] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34de80 | out: lpFindFileData=0x34de80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8088c6d0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8088c6d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x8088c6d0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x11d10, dwReserved0=0x0, dwReserved1=0x0, cFileName="jTczcazHz-Ty WI.pptx.Poteston", cAlternateFileName="JTCZCA~1.POT")) returned 1 [0297.833] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34de80 | out: lpFindFileData=0x34de80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80970f10, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x80970f10, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x80970f10, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x4ca0, dwReserved0=0x0, dwReserved1=0x0, cFileName="K1weDiwTL.rtf.Poteston", cAlternateFileName="K1WEDI~1.POT")) returned 1 [0297.833] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34de80 | out: lpFindFileData=0x34de80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80ac7b70, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x80ac7b70, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x80aedcd0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x18fc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kun5qpOiDRAfx.mkv.Poteston", cAlternateFileName="KUN5QP~1.POT")) returned 1 [0297.833] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34de80 | out: lpFindFileData=0x34de80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cdceb0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x80cdceb0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x80cdceb0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x13670, dwReserved0=0x0, dwReserved1=0x0, cFileName="l98rm1bJy-gBu5Z 1x8.png.Poteston", cAlternateFileName="L98RM1~1.POT")) returned 1 [0297.833] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34de80 | out: lpFindFileData=0x34de80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d9b590, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x80d9b590, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x80dc16f0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x181c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lswQ5zN 6DyLI6rYuLN.flv.Poteston", cAlternateFileName="LSWQ5Z~1.POT")) returned 1 [0297.833] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34de80 | out: lpFindFileData=0x34de80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x995dc4c0, ftCreationTime.dwHighDateTime=0x1d75438, ftLastAccessTime.dwLowDateTime=0x82295770, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x82295770, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LyNdnxnx", cAlternateFileName="")) returned 1 [0297.834] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34de80 | out: lpFindFileData=0x34de80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80ea5f30, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x80ea5f30, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x80ea5f30, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xf4f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lZ94.jpg.Poteston", cAlternateFileName="LZ94JP~1.POT")) returned 1 [0297.834] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34de80 | out: lpFindFileData=0x34de80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80f3e4b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x80f3e4b0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x80f64610, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x6620, dwReserved0=0x0, dwReserved1=0x0, cFileName="NbGDojkSCHs.jpg.Poteston", cAlternateFileName="NBGDOJ~1.POT")) returned 1 [0297.834] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34de80 | out: lpFindFileData=0x34de80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80ffcb90, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x80ffcb90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x81022cf0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xac80, dwReserved0=0x0, dwReserved1=0x0, cFileName="P081AogxR.m4a.Poteston", cAlternateFileName="P081AO~1.POT")) returned 1 [0297.834] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34de80 | out: lpFindFileData=0x34de80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81095110, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x81095110, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x81095110, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x4240, dwReserved0=0x0, dwReserved1=0x0, cFileName="r7xFYddkriuGuw.mp3.Poteston", cAlternateFileName="R7XFYD~1.POT")) returned 1 [0297.834] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34de80 | out: lpFindFileData=0x34de80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x811c5c10, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x811c5c10, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x811ebd70, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xf9a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="t w6B3Xd1y6z.pdf.Poteston", cAlternateFileName="TW6B3X~1.POT")) returned 1 [0297.834] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34de80 | out: lpFindFileData=0x34de80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8125e190, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8125e190, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x812842f0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x10460, dwReserved0=0x0, dwReserved1=0x0, cFileName="tLEVR66epfJvD2ES.gif.Poteston", cAlternateFileName="TLEVR6~1.POT")) returned 1 [0297.834] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34de80 | out: lpFindFileData=0x34de80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8131c870, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8131c870, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x8131c870, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x6140, dwReserved0=0x0, dwReserved1=0x0, cFileName="tqZ-p5ul.mp3.Poteston", cAlternateFileName="TQZ-P5~1.POT")) returned 1 [0297.834] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34de80 | out: lpFindFileData=0x34de80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x813daf50, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x813daf50, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x813daf50, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x10e80, dwReserved0=0x0, dwReserved1=0x0, cFileName="vxAGTMx1M.mp4.Poteston", cAlternateFileName="VXAGTM~1.POT")) returned 1 [0297.834] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34de80 | out: lpFindFileData=0x34de80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cd75900, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x4d6fef80, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0xa9d11000, ftLastWriteTime.dwHighDateTime=0x1d763b5, nFileSizeHigh=0x0, nFileSizeLow=0x45800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Session Manager.exe", cAlternateFileName="WINDOW~1.EXE")) returned 1 [0297.834] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34de80 | out: lpFindFileData=0x34de80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81499630, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x81499630, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x81b976d0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x45810, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Session Manager.exe.Poteston", cAlternateFileName="WINDOW~1.POT")) returned 1 [0297.834] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34de80 | out: lpFindFileData=0x34de80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81f4f930, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x81f4f930, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x81f75a90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x83d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wraamh9KshzuZIWO.mkv.Poteston", cAlternateFileName="WRAAMH~1.POT")) returned 1 [0297.834] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34de80 | out: lpFindFileData=0x34de80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8205a2d0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8205a2d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x8205a2d0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xe990, dwReserved0=0x0, dwReserved1=0x0, cFileName="z5QZWcE3yYXJYqGIm.ots.Poteston", cAlternateFileName="Z5QZWC~1.POT")) returned 1 [0297.834] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34de80 | out: lpFindFileData=0x34de80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x821189b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x821189b0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x821189b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xc3e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zNE QRjRnxJc7py_kOw6.mkv.Poteston", cAlternateFileName="ZNEQRJ~1.POT")) returned 1 [0297.835] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34de80 | out: lpFindFileData=0x34de80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x821d7090, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x821d7090, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x821d7090, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x18450, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZxlXhoDOmLBheQO.gif.Poteston", cAlternateFileName="ZXLXHO~1.POT")) returned 1 [0297.835] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34de80 | out: lpFindFileData=0x34de80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x821d7090, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x821d7090, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x821d7090, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x18450, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZxlXhoDOmLBheQO.gif.Poteston", cAlternateFileName="ZXLXHO~1.POT")) returned 0 [0297.835] FindClose (in: hFindFile=0x47de80 | out: hFindFile=0x47de80) returned 1 [0297.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34de38) returned 1 [0297.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34e098) returned 1 [0297.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34e0c8) returned 1 [0297.837] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop", nBufferLength=0x105, lpBuffer=0x34dba8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop", lpFilePart=0x0) returned 0x1a [0297.837] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\*", lpFindFileData=0x34de78 | out: lpFindFileData=0x34de78*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x821fd1f0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x821fd1f0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x47de80 [0297.838] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34de80 | out: lpFindFileData=0x34de80*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x821fd1f0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x821fd1f0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0297.838] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34de80 | out: lpFindFileData=0x34de80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ece0710, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7ece0710, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f157050, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8780, dwReserved0=0x0, dwReserved1=0x0, cFileName="-S33.bmp.Poteston", cAlternateFileName="-S33BM~1.POT")) returned 1 [0297.838] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34de80 | out: lpFindFileData=0x34de80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f63fdb0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f63fdb0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f63fdb0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x2620, dwReserved0=0x0, dwReserved1=0x0, cFileName="677aEP3NVPVTqr.jpg.Poteston", cAlternateFileName="677AEP~1.POT")) returned 1 [0297.838] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34de80 | out: lpFindFileData=0x34de80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f9f8010, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f9f8010, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f9f8010, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x13fd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="7h1t7zwQ4ZuOZlBh.pdf.Poteston", cAlternateFileName="7H1T7Z~1.POT")) returned 1 [0297.838] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34de80 | out: lpFindFileData=0x34de80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fc0d350, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7fc0d350, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7fc0d350, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x6110, dwReserved0=0x0, dwReserved1=0x0, cFileName="8KBcW4C3id-XWO3.bmp.Poteston", cAlternateFileName="8KBCW4~1.POT")) returned 1 [0297.838] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34de80 | out: lpFindFileData=0x34de80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9d12120, ftCreationTime.dwHighDateTime=0x1d75823, ftLastAccessTime.dwLowDateTime=0x821fd1f0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x821fd1f0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="9a-Wiva", cAlternateFileName="")) returned 1 [0297.838] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34de80 | out: lpFindFileData=0x34de80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fcf1b90, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7fcf1b90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7fd17cf0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x178a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="aL5T.mp3.Poteston", cAlternateFileName="AL5TMP~1.POT")) returned 1 [0297.838] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34de80 | out: lpFindFileData=0x34de80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fe22690, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7fe22690, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7fe22690, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xa520, dwReserved0=0x0, dwReserved1=0x0, cFileName="bliVjRUgxOohi.mp3.Poteston", cAlternateFileName="BLIVJR~1.POT")) returned 1 [0297.838] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34de80 | out: lpFindFileData=0x34de80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fee0d70, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7fee0d70, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7fee0d70, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x1ea0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cFKKYeu.jpg.Poteston", cAlternateFileName="CFKKYE~1.POT")) returned 1 [0297.838] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34de80 | out: lpFindFileData=0x34de80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ffc55b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7ffc55b0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7ffeb710, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x17c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="d280B.png.Poteston", cAlternateFileName="D280BP~1.POT")) returned 1 [0297.838] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34de80 | out: lpFindFileData=0x34de80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x800cff50, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x800cff50, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x800cff50, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x120, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini.Poteston", cAlternateFileName="DESKTO~1.POT")) returned 1 [0297.838] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34de80 | out: lpFindFileData=0x34de80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x801684d0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x801684d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x8018e630, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x12d70, dwReserved0=0x0, dwReserved1=0x0, cFileName="FdCidZt 3ToEAX.m4a.Poteston", cAlternateFileName="FDCIDZ~1.POT")) returned 1 [0297.838] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34de80 | out: lpFindFileData=0x34de80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8024cd10, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8024cd10, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x8024cd10, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x13f00, dwReserved0=0x0, dwReserved1=0x0, cFileName="g1B2.flv.Poteston", cAlternateFileName="G1B2FL~1.POT")) returned 1 [0297.838] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34de80 | out: lpFindFileData=0x34de80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x803576b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x803576b0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x803576b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x3f10, dwReserved0=0x0, dwReserved1=0x0, cFileName="gXJnC9SLmsW4N3mGiA.mp3.Poteston", cAlternateFileName="GXJNC9~1.POT")) returned 1 [0297.838] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34de80 | out: lpFindFileData=0x34de80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8043bef0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8043bef0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x80462050, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xabf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HkCCIp7G6XkCf6WS7z.ppt.Poteston", cAlternateFileName="HKCCIP~1.POT")) returned 1 [0297.838] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34de80 | out: lpFindFileData=0x34de80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8088c6d0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8088c6d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x8088c6d0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x11d10, dwReserved0=0x0, dwReserved1=0x0, cFileName="jTczcazHz-Ty WI.pptx.Poteston", cAlternateFileName="JTCZCA~1.POT")) returned 1 [0297.838] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34de80 | out: lpFindFileData=0x34de80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80970f10, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x80970f10, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x80970f10, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x4ca0, dwReserved0=0x0, dwReserved1=0x0, cFileName="K1weDiwTL.rtf.Poteston", cAlternateFileName="K1WEDI~1.POT")) returned 1 [0297.838] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34de80 | out: lpFindFileData=0x34de80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80ac7b70, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x80ac7b70, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x80aedcd0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x18fc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kun5qpOiDRAfx.mkv.Poteston", cAlternateFileName="KUN5QP~1.POT")) returned 1 [0297.839] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34de80 | out: lpFindFileData=0x34de80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cdceb0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x80cdceb0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x80cdceb0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x13670, dwReserved0=0x0, dwReserved1=0x0, cFileName="l98rm1bJy-gBu5Z 1x8.png.Poteston", cAlternateFileName="L98RM1~1.POT")) returned 1 [0297.839] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34de80 | out: lpFindFileData=0x34de80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d9b590, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x80d9b590, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x80dc16f0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x181c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lswQ5zN 6DyLI6rYuLN.flv.Poteston", cAlternateFileName="LSWQ5Z~1.POT")) returned 1 [0297.839] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34de80 | out: lpFindFileData=0x34de80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x995dc4c0, ftCreationTime.dwHighDateTime=0x1d75438, ftLastAccessTime.dwLowDateTime=0x82295770, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x82295770, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LyNdnxnx", cAlternateFileName="")) returned 1 [0297.839] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34de80 | out: lpFindFileData=0x34de80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80ea5f30, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x80ea5f30, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x80ea5f30, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xf4f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lZ94.jpg.Poteston", cAlternateFileName="LZ94JP~1.POT")) returned 1 [0297.839] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34de80 | out: lpFindFileData=0x34de80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80f3e4b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x80f3e4b0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x80f64610, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x6620, dwReserved0=0x0, dwReserved1=0x0, cFileName="NbGDojkSCHs.jpg.Poteston", cAlternateFileName="NBGDOJ~1.POT")) returned 1 [0297.839] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34de80 | out: lpFindFileData=0x34de80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80ffcb90, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x80ffcb90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x81022cf0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xac80, dwReserved0=0x0, dwReserved1=0x0, cFileName="P081AogxR.m4a.Poteston", cAlternateFileName="P081AO~1.POT")) returned 1 [0297.839] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34de80 | out: lpFindFileData=0x34de80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81095110, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x81095110, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x81095110, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x4240, dwReserved0=0x0, dwReserved1=0x0, cFileName="r7xFYddkriuGuw.mp3.Poteston", cAlternateFileName="R7XFYD~1.POT")) returned 1 [0297.839] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34de80 | out: lpFindFileData=0x34de80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x811c5c10, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x811c5c10, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x811ebd70, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xf9a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="t w6B3Xd1y6z.pdf.Poteston", cAlternateFileName="TW6B3X~1.POT")) returned 1 [0297.839] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34de80 | out: lpFindFileData=0x34de80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8125e190, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8125e190, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x812842f0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x10460, dwReserved0=0x0, dwReserved1=0x0, cFileName="tLEVR66epfJvD2ES.gif.Poteston", cAlternateFileName="TLEVR6~1.POT")) returned 1 [0297.839] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34de80 | out: lpFindFileData=0x34de80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8131c870, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8131c870, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x8131c870, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x6140, dwReserved0=0x0, dwReserved1=0x0, cFileName="tqZ-p5ul.mp3.Poteston", cAlternateFileName="TQZ-P5~1.POT")) returned 1 [0297.839] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34de80 | out: lpFindFileData=0x34de80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x813daf50, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x813daf50, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x813daf50, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x10e80, dwReserved0=0x0, dwReserved1=0x0, cFileName="vxAGTMx1M.mp4.Poteston", cAlternateFileName="VXAGTM~1.POT")) returned 1 [0297.839] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34de80 | out: lpFindFileData=0x34de80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cd75900, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x4d6fef80, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0xa9d11000, ftLastWriteTime.dwHighDateTime=0x1d763b5, nFileSizeHigh=0x0, nFileSizeLow=0x45800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Session Manager.exe", cAlternateFileName="WINDOW~1.EXE")) returned 1 [0297.839] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34de80 | out: lpFindFileData=0x34de80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81499630, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x81499630, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x81b976d0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x45810, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Session Manager.exe.Poteston", cAlternateFileName="WINDOW~1.POT")) returned 1 [0297.839] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34de80 | out: lpFindFileData=0x34de80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81f4f930, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x81f4f930, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x81f75a90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x83d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wraamh9KshzuZIWO.mkv.Poteston", cAlternateFileName="WRAAMH~1.POT")) returned 1 [0297.839] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34de80 | out: lpFindFileData=0x34de80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8205a2d0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x8205a2d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x8205a2d0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xe990, dwReserved0=0x0, dwReserved1=0x0, cFileName="z5QZWcE3yYXJYqGIm.ots.Poteston", cAlternateFileName="Z5QZWC~1.POT")) returned 1 [0297.839] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34de80 | out: lpFindFileData=0x34de80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x821189b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x821189b0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x821189b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xc3e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zNE QRjRnxJc7py_kOw6.mkv.Poteston", cAlternateFileName="ZNEQRJ~1.POT")) returned 1 [0297.839] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34de80 | out: lpFindFileData=0x34de80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x821d7090, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x821d7090, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x821d7090, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x18450, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZxlXhoDOmLBheQO.gif.Poteston", cAlternateFileName="ZXLXHO~1.POT")) returned 1 [0297.839] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34de80 | out: lpFindFileData=0x34de80*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0297.840] FindClose (in: hFindFile=0x47de80 | out: hFindFile=0x47de80) returned 1 [0297.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34de38) returned 1 [0297.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34e098) returned 1 [0297.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34db8c) returned 1 [0297.924] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva", nBufferLength=0x105, lpBuffer=0x34d66c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva", lpFilePart=0x0) returned 0x22 [0297.925] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\*", lpFindFileData=0x34d93c | out: lpFindFileData=0x34d93c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9d12120, ftCreationTime.dwHighDateTime=0x1d75823, ftLastAccessTime.dwLowDateTime=0x821fd1f0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x821fd1f0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x47de80 [0297.939] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d944 | out: lpFindFileData=0x34d944*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9d12120, ftCreationTime.dwHighDateTime=0x1d75823, ftLastAccessTime.dwLowDateTime=0x821fd1f0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x821fd1f0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0297.939] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d944 | out: lpFindFileData=0x34d944*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f287b50, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f287b50, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f2adcb0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x74b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DJIlxXh.pptx.Poteston", cAlternateFileName="DJILXX~1.POT")) returned 1 [0297.939] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d944 | out: lpFindFileData=0x34d944*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f2adcb0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f2adcb0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f2d3e10, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x143f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="epH-_N hU0l.jpg.Poteston", cAlternateFileName="EPH-_N~1.POT")) returned 1 [0297.939] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d944 | out: lpFindFileData=0x34d944*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f2f9f70, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f2f9f70, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f3200d0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x2dc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nGUytBPJlqP.rtf.Poteston", cAlternateFileName="NGUYTB~1.POT")) returned 1 [0297.940] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d944 | out: lpFindFileData=0x34d944*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f3de7b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x821fd1f0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x821fd1f0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0297.940] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d944 | out: lpFindFileData=0x34d944*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f808e30, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f808e30, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x821fd1f0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0297.940] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d944 | out: lpFindFileData=0x34d944*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f3200d0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f3200d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f346230, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xe430, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPnXfcP7CFdFT0XeBuv6.ots.Poteston", cAlternateFileName="SPNXFC~1.POT")) returned 1 [0297.940] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d944 | out: lpFindFileData=0x34d944*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f36c390, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f36c390, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f36c390, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="UapJbgd7.flv.Poteston", cAlternateFileName="UAPJBG~1.POT")) returned 1 [0297.940] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d944 | out: lpFindFileData=0x34d944*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f3924f0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f3924f0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f3b8650, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xcd80, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc-4n.png.Poteston", cAlternateFileName="VC-4NP~1.POT")) returned 1 [0297.940] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d944 | out: lpFindFileData=0x34d944*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f3924f0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f3924f0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f3b8650, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xcd80, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc-4n.png.Poteston", cAlternateFileName="VC-4NP~1.POT")) returned 0 [0297.940] FindClose (in: hFindFile=0x47de80 | out: hFindFile=0x47de80) returned 1 [0297.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34d8fc) returned 1 [0297.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34db5c) returned 1 [0297.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34db8c) returned 1 [0297.941] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva", nBufferLength=0x105, lpBuffer=0x34d66c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva", lpFilePart=0x0) returned 0x22 [0297.941] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\*", lpFindFileData=0x34d93c | out: lpFindFileData=0x34d93c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9d12120, ftCreationTime.dwHighDateTime=0x1d75823, ftLastAccessTime.dwLowDateTime=0x821fd1f0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x821fd1f0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x47de80 [0297.942] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d944 | out: lpFindFileData=0x34d944*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9d12120, ftCreationTime.dwHighDateTime=0x1d75823, ftLastAccessTime.dwLowDateTime=0x821fd1f0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x821fd1f0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0297.942] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d944 | out: lpFindFileData=0x34d944*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f287b50, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f287b50, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f2adcb0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x74b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DJIlxXh.pptx.Poteston", cAlternateFileName="DJILXX~1.POT")) returned 1 [0297.942] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d944 | out: lpFindFileData=0x34d944*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f2adcb0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f2adcb0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f2d3e10, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x143f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="epH-_N hU0l.jpg.Poteston", cAlternateFileName="EPH-_N~1.POT")) returned 1 [0297.942] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d944 | out: lpFindFileData=0x34d944*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f2f9f70, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f2f9f70, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f3200d0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x2dc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nGUytBPJlqP.rtf.Poteston", cAlternateFileName="NGUYTB~1.POT")) returned 1 [0297.942] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d944 | out: lpFindFileData=0x34d944*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f3de7b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x821fd1f0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x821fd1f0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0297.942] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d944 | out: lpFindFileData=0x34d944*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f808e30, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f808e30, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x821fd1f0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0297.942] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d944 | out: lpFindFileData=0x34d944*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f3200d0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f3200d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f346230, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xe430, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPnXfcP7CFdFT0XeBuv6.ots.Poteston", cAlternateFileName="SPNXFC~1.POT")) returned 1 [0297.942] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d944 | out: lpFindFileData=0x34d944*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f36c390, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f36c390, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f36c390, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="UapJbgd7.flv.Poteston", cAlternateFileName="UAPJBG~1.POT")) returned 1 [0297.942] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d944 | out: lpFindFileData=0x34d944*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f3924f0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f3924f0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f3b8650, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xcd80, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc-4n.png.Poteston", cAlternateFileName="VC-4NP~1.POT")) returned 1 [0297.942] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d944 | out: lpFindFileData=0x34d944*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0297.942] FindClose (in: hFindFile=0x47de80 | out: hFindFile=0x47de80) returned 1 [0297.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34d8fc) returned 1 [0297.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34db5c) returned 1 [0297.951] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d694, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt", lpFilePart=0x0) returned 0x2d [0298.038] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt", nBufferLength=0x105, lpBuffer=0x34cf80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt", lpFilePart=0x0) returned 0x2d [0298.038] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34d498) returned 1 [0298.038] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x360 [0298.074] GetFileType (hFile=0x360) returned 0x1 [0298.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34d494) returned 1 [0298.074] GetFileType (hFile=0x360) returned 0x1 [0298.075] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt.Poteston", nBufferLength=0x105, lpBuffer=0x34cf80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt.Poteston", lpFilePart=0x0) returned 0x36 [0298.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34d498) returned 1 [0298.075] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt.Poteston" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\readme.txt.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x364 [0298.075] GetFileType (hFile=0x364) returned 0x1 [0298.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34d494) returned 1 [0298.076] GetFileType (hFile=0x364) returned 0x1 [0298.079] SetEndOfFile (hFile=0x364) returned 1 [0298.083] GetFileSize (in: hFile=0x360, lpFileSizeHigh=0x34d57c | out: lpFileSizeHigh=0x34d57c*=0x0) returned 0x33e [0298.241] ReadFile (in: hFile=0x360, lpBuffer=0x272acf4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x34d520, lpOverlapped=0x0 | out: lpBuffer=0x272acf4*, lpNumberOfBytesRead=0x34d520*=0x33e, lpOverlapped=0x0) returned 1 [0298.250] WriteFile (in: hFile=0x364, lpBuffer=0x273070c*, nNumberOfBytesToWrite=0x340, lpNumberOfBytesWritten=0x34d4e4, lpOverlapped=0x0 | out: lpBuffer=0x273070c*, lpNumberOfBytesWritten=0x34d4e4*=0x340, lpOverlapped=0x0) returned 1 [0298.251] CloseHandle (hObject=0x364) returned 1 [0298.253] CloseHandle (hObject=0x360) returned 1 [0298.256] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\readme.txt")) returned 1 [0298.257] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d694, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt", lpFilePart=0x0) returned 0x2d [0298.259] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt", nBufferLength=0x105, lpBuffer=0x34cf80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt", lpFilePart=0x0) returned 0x2d [0298.259] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34d498) returned 1 [0298.259] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0298.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34c2b8) returned 1 [0298.279] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\readme.txt")) returned 0 [0298.280] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d694, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt", lpFilePart=0x0) returned 0x2d [0298.281] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt", nBufferLength=0x105, lpBuffer=0x34cf80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt", lpFilePart=0x0) returned 0x2d [0298.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34d498) returned 1 [0298.281] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0298.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34c2b8) returned 1 [0298.283] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\readme.txt")) returned 0 [0298.284] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d694, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt", lpFilePart=0x0) returned 0x2d [0298.285] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt", nBufferLength=0x105, lpBuffer=0x34cf80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt", lpFilePart=0x0) returned 0x2d [0298.285] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34d498) returned 1 [0298.285] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0298.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34c2b8) returned 1 [0298.286] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\readme.txt")) returned 0 [0298.287] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d694, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt", lpFilePart=0x0) returned 0x2d [0298.288] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt", nBufferLength=0x105, lpBuffer=0x34cf80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt", lpFilePart=0x0) returned 0x2d [0298.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34d498) returned 1 [0298.288] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0298.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34c2b8) returned 1 [0298.290] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\readme.txt")) returned 0 [0298.290] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d694, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt", lpFilePart=0x0) returned 0x2d [0298.291] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt", nBufferLength=0x105, lpBuffer=0x34cf80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt", lpFilePart=0x0) returned 0x2d [0298.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34d498) returned 1 [0298.291] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0298.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34c2b8) returned 1 [0298.293] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\readme.txt")) returned 0 [0298.293] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d694, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt", lpFilePart=0x0) returned 0x2d [0298.294] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt", nBufferLength=0x105, lpBuffer=0x34cf80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt", lpFilePart=0x0) returned 0x2d [0298.294] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34d498) returned 1 [0298.294] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0298.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34c2b8) returned 1 [0298.296] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\readme.txt")) returned 0 [0298.296] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d694, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt", lpFilePart=0x0) returned 0x2d [0298.297] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt", nBufferLength=0x105, lpBuffer=0x34cf80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt", lpFilePart=0x0) returned 0x2d [0298.297] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34d498) returned 1 [0298.297] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0298.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34c2b8) returned 1 [0298.299] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\readme.txt")) returned 0 [0298.308] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d934, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt", lpFilePart=0x0) returned 0x2d [0298.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34de4c) returned 1 [0298.309] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x360 [0298.310] GetFileType (hFile=0x360) returned 0x1 [0298.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34de48) returned 1 [0298.310] GetFileType (hFile=0x360) returned 0x1 [0298.315] WriteFile (in: hFile=0x360, lpBuffer=0x27429f4*, nNumberOfBytesToWrite=0x33e, lpNumberOfBytesWritten=0x34debc, lpOverlapped=0x0 | out: lpBuffer=0x27429f4*, lpNumberOfBytesWritten=0x34debc*=0x33e, lpOverlapped=0x0) returned 1 [0298.316] CloseHandle (hObject=0x360) returned 1 [0298.322] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34db8c) returned 1 [0298.323] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx", nBufferLength=0x105, lpBuffer=0x34d66c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx", lpFilePart=0x0) returned 0x23 [0298.323] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\*", lpFindFileData=0x34d93c | out: lpFindFileData=0x34d93c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x995dc4c0, ftCreationTime.dwHighDateTime=0x1d75438, ftLastAccessTime.dwLowDateTime=0x82295770, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x82295770, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x47de80 [0298.325] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d944 | out: lpFindFileData=0x34d944*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x995dc4c0, ftCreationTime.dwHighDateTime=0x1d75438, ftLastAccessTime.dwLowDateTime=0x82295770, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x82295770, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0298.325] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d944 | out: lpFindFileData=0x34d944*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f3de7b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f3de7b0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f3de7b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x29f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="7du2.gif.Poteston", cAlternateFileName="7DU2GI~1.POT")) returned 1 [0298.325] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d944 | out: lpFindFileData=0x34d944*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f50f2b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f50f2b0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f535410, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xde90, dwReserved0=0x0, dwReserved1=0x0, cFileName="ixaXT-WqX0.swf.Poteston", cAlternateFileName="IXAXT-~1.POT")) returned 1 [0298.325] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d944 | out: lpFindFileData=0x34d944*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f63fdb0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x82295770, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x82295770, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0298.325] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d944 | out: lpFindFileData=0x34d944*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f939930, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f939930, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x822494b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0298.325] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d944 | out: lpFindFileData=0x34d944*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f55b570, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f55b570, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f55b570, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x152c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TETQ.m4a.Poteston", cAlternateFileName="TETQM4~1.POT")) returned 1 [0298.325] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d944 | out: lpFindFileData=0x34d944*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x872e87c0, ftCreationTime.dwHighDateTime=0x1d75aab, ftLastAccessTime.dwLowDateTime=0x82295770, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x82295770, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UkCm4Dq_", cAlternateFileName="")) returned 1 [0298.325] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d944 | out: lpFindFileData=0x34d944*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f5a7830, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f5a7830, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f5cd990, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x16970, dwReserved0=0x0, dwReserved1=0x0, cFileName="z71-eOvw.m4a.Poteston", cAlternateFileName="Z71-EO~1.POT")) returned 1 [0298.325] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d944 | out: lpFindFileData=0x34d944*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f5a7830, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f5a7830, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f5cd990, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x16970, dwReserved0=0x0, dwReserved1=0x0, cFileName="z71-eOvw.m4a.Poteston", cAlternateFileName="Z71-EO~1.POT")) returned 0 [0298.325] FindClose (in: hFindFile=0x47de80 | out: hFindFile=0x47de80) returned 1 [0298.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34d8fc) returned 1 [0298.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34db5c) returned 1 [0298.326] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34db8c) returned 1 [0298.326] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx", nBufferLength=0x105, lpBuffer=0x34d66c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx", lpFilePart=0x0) returned 0x23 [0298.326] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\*", lpFindFileData=0x34d93c | out: lpFindFileData=0x34d93c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x995dc4c0, ftCreationTime.dwHighDateTime=0x1d75438, ftLastAccessTime.dwLowDateTime=0x82295770, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x82295770, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x47de80 [0298.331] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d944 | out: lpFindFileData=0x34d944*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x995dc4c0, ftCreationTime.dwHighDateTime=0x1d75438, ftLastAccessTime.dwLowDateTime=0x82295770, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x82295770, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0298.332] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d944 | out: lpFindFileData=0x34d944*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f3de7b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f3de7b0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f3de7b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x29f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="7du2.gif.Poteston", cAlternateFileName="7DU2GI~1.POT")) returned 1 [0298.332] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d944 | out: lpFindFileData=0x34d944*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f50f2b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f50f2b0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f535410, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xde90, dwReserved0=0x0, dwReserved1=0x0, cFileName="ixaXT-WqX0.swf.Poteston", cAlternateFileName="IXAXT-~1.POT")) returned 1 [0298.332] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d944 | out: lpFindFileData=0x34d944*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f63fdb0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x82295770, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x82295770, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0298.332] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d944 | out: lpFindFileData=0x34d944*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f939930, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f939930, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x822494b0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0298.332] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d944 | out: lpFindFileData=0x34d944*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f55b570, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f55b570, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f55b570, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x152c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TETQ.m4a.Poteston", cAlternateFileName="TETQM4~1.POT")) returned 1 [0298.332] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d944 | out: lpFindFileData=0x34d944*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x872e87c0, ftCreationTime.dwHighDateTime=0x1d75aab, ftLastAccessTime.dwLowDateTime=0x82295770, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x82295770, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UkCm4Dq_", cAlternateFileName="")) returned 1 [0298.332] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d944 | out: lpFindFileData=0x34d944*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f5a7830, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f5a7830, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f5cd990, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x16970, dwReserved0=0x0, dwReserved1=0x0, cFileName="z71-eOvw.m4a.Poteston", cAlternateFileName="Z71-EO~1.POT")) returned 1 [0298.332] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d944 | out: lpFindFileData=0x34d944*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0298.332] FindClose (in: hFindFile=0x47de80 | out: hFindFile=0x47de80) returned 1 [0298.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34d8fc) returned 1 [0298.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34db5c) returned 1 [0298.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34d650) returned 1 [0298.336] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_", nBufferLength=0x105, lpBuffer=0x34d130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_", lpFilePart=0x0) returned 0x2c [0298.336] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\*", lpFindFileData=0x34d400 | out: lpFindFileData=0x34d400*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x872e87c0, ftCreationTime.dwHighDateTime=0x1d75aab, ftLastAccessTime.dwLowDateTime=0x82295770, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x82295770, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x47de80 [0298.339] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x872e87c0, ftCreationTime.dwHighDateTime=0x1d75aab, ftLastAccessTime.dwLowDateTime=0x82295770, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x82295770, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0298.339] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f404910, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f404910, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f404910, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x85a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2W4Hx.m4a.Poteston", cAlternateFileName="2W4HXM~1.POT")) returned 1 [0298.339] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f42aa70, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f42aa70, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f42aa70, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x14b20, dwReserved0=0x0, dwReserved1=0x0, cFileName="EoS9VOqOPP_4IHn.mp4.Poteston", cAlternateFileName="EOS9VO~1.POT")) returned 1 [0298.339] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f450bd0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f450bd0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f476d30, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x14630, dwReserved0=0x0, dwReserved1=0x0, cFileName="G ZkrQjDnE0.odt.Poteston", cAlternateFileName="GZKRQJ~1.POT")) returned 1 [0298.339] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f476d30, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f476d30, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f49ce90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x9880, dwReserved0=0x0, dwReserved1=0x0, cFileName="noCEUmxfykebkeyH9.flv.Poteston", cAlternateFileName="NOCEUM~1.POT")) returned 1 [0298.339] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f50f2b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x82295770, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x82295770, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0298.339] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f535410, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f535410, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x82295770, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0298.340] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f49ce90, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f49ce90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4c2ff0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xb140, dwReserved0=0x0, dwReserved1=0x0, cFileName="TbVG3PC0bCG2.png.Poteston", cAlternateFileName="TBVG3P~1.POT")) returned 1 [0298.340] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4c2ff0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f4c2ff0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4e9150, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xd1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XbvlKnZREA1k.mp3.Poteston", cAlternateFileName="XBVLKN~1.POT")) returned 1 [0298.340] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4e9150, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f4e9150, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4e9150, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8150, dwReserved0=0x0, dwReserved1=0x0, cFileName="XtD X6g3ZZH.m4a.Poteston", cAlternateFileName="XTDX6G~1.POT")) returned 1 [0298.340] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4e9150, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f4e9150, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4e9150, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8150, dwReserved0=0x0, dwReserved1=0x0, cFileName="XtD X6g3ZZH.m4a.Poteston", cAlternateFileName="XTDX6G~1.POT")) returned 0 [0298.340] FindClose (in: hFindFile=0x47de80 | out: hFindFile=0x47de80) returned 1 [0298.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34d3c0) returned 1 [0298.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34d620) returned 1 [0298.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34d650) returned 1 [0298.341] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_", nBufferLength=0x105, lpBuffer=0x34d130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_", lpFilePart=0x0) returned 0x2c [0298.341] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\*", lpFindFileData=0x34d400 | out: lpFindFileData=0x34d400*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x872e87c0, ftCreationTime.dwHighDateTime=0x1d75aab, ftLastAccessTime.dwLowDateTime=0x82295770, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x82295770, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x47de80 [0298.342] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x872e87c0, ftCreationTime.dwHighDateTime=0x1d75aab, ftLastAccessTime.dwLowDateTime=0x82295770, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x82295770, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0298.342] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f404910, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f404910, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f404910, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x85a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2W4Hx.m4a.Poteston", cAlternateFileName="2W4HXM~1.POT")) returned 1 [0298.342] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f42aa70, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f42aa70, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f42aa70, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x14b20, dwReserved0=0x0, dwReserved1=0x0, cFileName="EoS9VOqOPP_4IHn.mp4.Poteston", cAlternateFileName="EOS9VO~1.POT")) returned 1 [0298.342] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f450bd0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f450bd0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f476d30, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x14630, dwReserved0=0x0, dwReserved1=0x0, cFileName="G ZkrQjDnE0.odt.Poteston", cAlternateFileName="GZKRQJ~1.POT")) returned 1 [0298.342] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f476d30, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f476d30, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f49ce90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x9880, dwReserved0=0x0, dwReserved1=0x0, cFileName="noCEUmxfykebkeyH9.flv.Poteston", cAlternateFileName="NOCEUM~1.POT")) returned 1 [0298.342] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f50f2b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x82295770, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x82295770, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0298.342] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f535410, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f535410, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x82295770, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0298.342] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f49ce90, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f49ce90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4c2ff0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xb140, dwReserved0=0x0, dwReserved1=0x0, cFileName="TbVG3PC0bCG2.png.Poteston", cAlternateFileName="TBVG3P~1.POT")) returned 1 [0298.342] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4c2ff0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f4c2ff0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4e9150, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xd1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XbvlKnZREA1k.mp3.Poteston", cAlternateFileName="XBVLKN~1.POT")) returned 1 [0298.342] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4e9150, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f4e9150, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4e9150, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8150, dwReserved0=0x0, dwReserved1=0x0, cFileName="XtD X6g3ZZH.m4a.Poteston", cAlternateFileName="XTDX6G~1.POT")) returned 1 [0298.342] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0298.342] FindClose (in: hFindFile=0x47de80 | out: hFindFile=0x47de80) returned 1 [0298.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34d3c0) returned 1 [0298.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34d620) returned 1 [0298.352] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d158, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.352] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34ca44, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34cf5c) returned 1 [0298.352] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x360 [0298.354] GetFileType (hFile=0x360) returned 0x1 [0298.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34cf58) returned 1 [0298.354] GetFileType (hFile=0x360) returned 0x1 [0298.354] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt.Poteston", nBufferLength=0x105, lpBuffer=0x34ca44, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt.Poteston", lpFilePart=0x0) returned 0x40 [0298.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34cf5c) returned 1 [0298.354] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt.Poteston" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x364 [0298.355] GetFileType (hFile=0x364) returned 0x1 [0298.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34cf58) returned 1 [0298.355] GetFileType (hFile=0x364) returned 0x1 [0298.355] SetEndOfFile (hFile=0x364) returned 1 [0298.356] GetFileSize (in: hFile=0x360, lpFileSizeHigh=0x34d040 | out: lpFileSizeHigh=0x34d040*=0x0) returned 0x33e [0298.356] ReadFile (in: hFile=0x360, lpBuffer=0x2753600, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x34cfe4, lpOverlapped=0x0 | out: lpBuffer=0x2753600*, lpNumberOfBytesRead=0x34cfe4*=0x33e, lpOverlapped=0x0) returned 1 [0298.357] WriteFile (in: hFile=0x364, lpBuffer=0x2754dec*, nNumberOfBytesToWrite=0x340, lpNumberOfBytesWritten=0x34cfa8, lpOverlapped=0x0 | out: lpBuffer=0x2754dec*, lpNumberOfBytesWritten=0x34cfa8*=0x340, lpOverlapped=0x0) returned 1 [0298.358] CloseHandle (hObject=0x364) returned 1 [0298.359] CloseHandle (hObject=0x360) returned 1 [0298.359] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 1 [0298.360] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d158, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.361] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34ca44, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34cf5c) returned 1 [0298.361] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0298.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34bd78) returned 1 [0298.362] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0298.363] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d158, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.364] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34ca44, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34cf5c) returned 1 [0298.364] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0298.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34bd78) returned 1 [0298.365] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0298.366] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d158, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.367] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34ca44, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.367] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34cf5c) returned 1 [0298.367] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0298.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34bd78) returned 1 [0298.368] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0298.369] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d158, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.370] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34ca44, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34cf5c) returned 1 [0298.370] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0298.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34bd78) returned 1 [0298.371] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0298.372] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d158, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.373] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34ca44, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34cf5c) returned 1 [0298.373] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0298.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34bd78) returned 1 [0298.375] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0298.376] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d158, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.376] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34ca44, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34cf5c) returned 1 [0298.377] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0298.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34bd78) returned 1 [0298.378] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0298.378] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d158, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.379] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34ca44, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34cf5c) returned 1 [0298.379] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0298.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34bd78) returned 1 [0298.380] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0298.380] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d158, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.381] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34ca44, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.381] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34cf5c) returned 1 [0298.381] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0298.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34bd78) returned 1 [0298.382] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0298.391] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34d910) returned 1 [0298.391] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x360 [0298.391] GetFileType (hFile=0x360) returned 0x1 [0298.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34d90c) returned 1 [0298.392] GetFileType (hFile=0x360) returned 0x1 [0298.392] WriteFile (in: hFile=0x360, lpBuffer=0x2768d94*, nNumberOfBytesToWrite=0x33e, lpNumberOfBytesWritten=0x34d980, lpOverlapped=0x0 | out: lpBuffer=0x2768d94*, lpNumberOfBytesWritten=0x34d980*=0x33e, lpOverlapped=0x0) returned 1 [0298.393] CloseHandle (hObject=0x360) returned 1 [0298.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34d650) returned 1 [0298.400] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_", nBufferLength=0x105, lpBuffer=0x34d130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_", lpFilePart=0x0) returned 0x2c [0298.400] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\*", lpFindFileData=0x34d400 | out: lpFindFileData=0x34d400*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x872e87c0, ftCreationTime.dwHighDateTime=0x1d75aab, ftLastAccessTime.dwLowDateTime=0x22ed710, ftLastAccessTime.dwHighDateTime=0x1d763ba, ftLastWriteTime.dwLowDateTime=0x22ed710, ftLastWriteTime.dwHighDateTime=0x1d763ba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x47de80 [0298.400] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x872e87c0, ftCreationTime.dwHighDateTime=0x1d75aab, ftLastAccessTime.dwLowDateTime=0x22ed710, ftLastAccessTime.dwHighDateTime=0x1d763ba, ftLastWriteTime.dwLowDateTime=0x22ed710, ftLastWriteTime.dwHighDateTime=0x1d763ba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0298.400] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f404910, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f404910, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f404910, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x85a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2W4Hx.m4a.Poteston", cAlternateFileName="2W4HXM~1.POT")) returned 1 [0298.400] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f42aa70, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f42aa70, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f42aa70, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x14b20, dwReserved0=0x0, dwReserved1=0x0, cFileName="EoS9VOqOPP_4IHn.mp4.Poteston", cAlternateFileName="EOS9VO~1.POT")) returned 1 [0298.400] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f450bd0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f450bd0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f476d30, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x14630, dwReserved0=0x0, dwReserved1=0x0, cFileName="G ZkrQjDnE0.odt.Poteston", cAlternateFileName="GZKRQJ~1.POT")) returned 1 [0298.400] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f476d30, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f476d30, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f49ce90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x9880, dwReserved0=0x0, dwReserved1=0x0, cFileName="noCEUmxfykebkeyH9.flv.Poteston", cAlternateFileName="NOCEUM~1.POT")) returned 1 [0298.400] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f50f2b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x22ed710, ftLastAccessTime.dwHighDateTime=0x1d763ba, ftLastWriteTime.dwLowDateTime=0x22ed710, ftLastWriteTime.dwHighDateTime=0x1d763ba, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0298.400] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f535410, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f535410, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x22a1450, ftLastWriteTime.dwHighDateTime=0x1d763ba, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0298.400] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f49ce90, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f49ce90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4c2ff0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xb140, dwReserved0=0x0, dwReserved1=0x0, cFileName="TbVG3PC0bCG2.png.Poteston", cAlternateFileName="TBVG3P~1.POT")) returned 1 [0298.400] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4c2ff0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f4c2ff0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4e9150, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xd1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XbvlKnZREA1k.mp3.Poteston", cAlternateFileName="XBVLKN~1.POT")) returned 1 [0298.400] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4e9150, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f4e9150, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4e9150, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8150, dwReserved0=0x0, dwReserved1=0x0, cFileName="XtD X6g3ZZH.m4a.Poteston", cAlternateFileName="XTDX6G~1.POT")) returned 1 [0298.400] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4e9150, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f4e9150, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4e9150, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8150, dwReserved0=0x0, dwReserved1=0x0, cFileName="XtD X6g3ZZH.m4a.Poteston", cAlternateFileName="XTDX6G~1.POT")) returned 0 [0298.401] FindClose (in: hFindFile=0x47de80 | out: hFindFile=0x47de80) returned 1 [0298.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34d3c0) returned 1 [0298.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34d620) returned 1 [0298.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34d650) returned 1 [0298.401] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_", nBufferLength=0x105, lpBuffer=0x34d130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_", lpFilePart=0x0) returned 0x2c [0298.401] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\*", lpFindFileData=0x34d400 | out: lpFindFileData=0x34d400*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x872e87c0, ftCreationTime.dwHighDateTime=0x1d75aab, ftLastAccessTime.dwLowDateTime=0x22ed710, ftLastAccessTime.dwHighDateTime=0x1d763ba, ftLastWriteTime.dwLowDateTime=0x22ed710, ftLastWriteTime.dwHighDateTime=0x1d763ba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x47de80 [0298.401] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x872e87c0, ftCreationTime.dwHighDateTime=0x1d75aab, ftLastAccessTime.dwLowDateTime=0x22ed710, ftLastAccessTime.dwHighDateTime=0x1d763ba, ftLastWriteTime.dwLowDateTime=0x22ed710, ftLastWriteTime.dwHighDateTime=0x1d763ba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0298.401] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f404910, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f404910, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f404910, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x85a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2W4Hx.m4a.Poteston", cAlternateFileName="2W4HXM~1.POT")) returned 1 [0298.401] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f42aa70, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f42aa70, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f42aa70, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x14b20, dwReserved0=0x0, dwReserved1=0x0, cFileName="EoS9VOqOPP_4IHn.mp4.Poteston", cAlternateFileName="EOS9VO~1.POT")) returned 1 [0298.401] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f450bd0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f450bd0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f476d30, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x14630, dwReserved0=0x0, dwReserved1=0x0, cFileName="G ZkrQjDnE0.odt.Poteston", cAlternateFileName="GZKRQJ~1.POT")) returned 1 [0298.401] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f476d30, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f476d30, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f49ce90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x9880, dwReserved0=0x0, dwReserved1=0x0, cFileName="noCEUmxfykebkeyH9.flv.Poteston", cAlternateFileName="NOCEUM~1.POT")) returned 1 [0298.401] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f50f2b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x22ed710, ftLastAccessTime.dwHighDateTime=0x1d763ba, ftLastWriteTime.dwLowDateTime=0x22ed710, ftLastWriteTime.dwHighDateTime=0x1d763ba, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0298.402] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f535410, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f535410, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x22a1450, ftLastWriteTime.dwHighDateTime=0x1d763ba, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0298.402] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f49ce90, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f49ce90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4c2ff0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xb140, dwReserved0=0x0, dwReserved1=0x0, cFileName="TbVG3PC0bCG2.png.Poteston", cAlternateFileName="TBVG3P~1.POT")) returned 1 [0298.402] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4c2ff0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f4c2ff0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4e9150, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xd1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XbvlKnZREA1k.mp3.Poteston", cAlternateFileName="XBVLKN~1.POT")) returned 1 [0298.402] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4e9150, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f4e9150, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4e9150, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8150, dwReserved0=0x0, dwReserved1=0x0, cFileName="XtD X6g3ZZH.m4a.Poteston", cAlternateFileName="XTDX6G~1.POT")) returned 1 [0298.402] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0298.402] FindClose (in: hFindFile=0x47de80 | out: hFindFile=0x47de80) returned 1 [0298.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34d3c0) returned 1 [0298.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34d620) returned 1 [0298.408] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d158, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.409] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34ca44, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.409] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34cf5c) returned 1 [0298.409] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x360 [0298.409] GetFileType (hFile=0x360) returned 0x1 [0298.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34cf58) returned 1 [0298.409] GetFileType (hFile=0x360) returned 0x1 [0298.409] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt.Poteston", nBufferLength=0x105, lpBuffer=0x34ca44, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt.Poteston", lpFilePart=0x0) returned 0x40 [0298.409] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34cf5c) returned 1 [0298.409] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt.Poteston" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x364 [0298.410] GetFileType (hFile=0x364) returned 0x1 [0298.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34cf58) returned 1 [0298.410] GetFileType (hFile=0x364) returned 0x1 [0298.410] SetEndOfFile (hFile=0x364) returned 1 [0298.411] GetFileSize (in: hFile=0x360, lpFileSizeHigh=0x34d040 | out: lpFileSizeHigh=0x34d040*=0x0) returned 0x33e [0298.411] ReadFile (in: hFile=0x360, lpBuffer=0x277793c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x34cfe4, lpOverlapped=0x0 | out: lpBuffer=0x277793c*, lpNumberOfBytesRead=0x34cfe4*=0x33e, lpOverlapped=0x0) returned 1 [0298.411] WriteFile (in: hFile=0x364, lpBuffer=0x2779134*, nNumberOfBytesToWrite=0x340, lpNumberOfBytesWritten=0x34cfa8, lpOverlapped=0x0 | out: lpBuffer=0x2779134*, lpNumberOfBytesWritten=0x34cfa8*=0x340, lpOverlapped=0x0) returned 1 [0298.412] CloseHandle (hObject=0x364) returned 1 [0298.414] CloseHandle (hObject=0x360) returned 1 [0298.415] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 1 [0298.416] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d158, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.417] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34ca44, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34cf5c) returned 1 [0298.417] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0298.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34bd78) returned 1 [0298.419] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0298.420] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d158, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.422] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34ca44, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34cf5c) returned 1 [0298.422] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0298.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34bd78) returned 1 [0298.424] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0298.425] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d158, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.426] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34ca44, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.426] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34cf5c) returned 1 [0298.427] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0298.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34bd78) returned 1 [0298.428] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0298.429] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d158, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.430] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34ca44, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34cf5c) returned 1 [0298.430] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0298.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34bd78) returned 1 [0298.432] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0298.433] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d158, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.433] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34ca44, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34cf5c) returned 1 [0298.434] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0298.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34bd78) returned 1 [0298.435] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0298.436] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d158, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.437] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34ca44, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34cf5c) returned 1 [0298.437] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0298.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34bd78) returned 1 [0298.438] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0298.438] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d158, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.439] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34ca44, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34cf5c) returned 1 [0298.439] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0298.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34bd78) returned 1 [0298.440] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0298.440] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d158, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.441] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34ca44, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34cf5c) returned 1 [0298.441] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0298.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34bd78) returned 1 [0298.442] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0298.451] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34d910) returned 1 [0298.451] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x360 [0298.451] GetFileType (hFile=0x360) returned 0x1 [0298.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34d90c) returned 1 [0298.451] GetFileType (hFile=0x360) returned 0x1 [0298.452] WriteFile (in: hFile=0x360, lpBuffer=0x278d0dc*, nNumberOfBytesToWrite=0x33e, lpNumberOfBytesWritten=0x34d980, lpOverlapped=0x0 | out: lpBuffer=0x278d0dc*, lpNumberOfBytesWritten=0x34d980*=0x33e, lpOverlapped=0x0) returned 1 [0298.454] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d694, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\readme.txt", lpFilePart=0x0) returned 0x2e [0298.455] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\readme.txt", nBufferLength=0x105, lpBuffer=0x34cf80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\readme.txt", lpFilePart=0x0) returned 0x2e [0298.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34d498) returned 1 [0298.455] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x360 [0298.455] GetFileType (hFile=0x360) returned 0x1 [0298.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34d494) returned 1 [0298.455] GetFileType (hFile=0x360) returned 0x1 [0298.455] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\readme.txt.Poteston", nBufferLength=0x105, lpBuffer=0x34cf80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\readme.txt.Poteston", lpFilePart=0x0) returned 0x37 [0298.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34d498) returned 1 [0298.456] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\readme.txt.Poteston" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\readme.txt.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x364 [0298.457] GetFileType (hFile=0x364) returned 0x1 [0298.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34d494) returned 1 [0298.457] GetFileType (hFile=0x364) returned 0x1 [0298.457] SetEndOfFile (hFile=0x364) returned 1 [0298.457] GetFileSize (in: hFile=0x360, lpFileSizeHigh=0x34d57c | out: lpFileSizeHigh=0x34d57c*=0x0) returned 0x33e [0298.457] ReadFile (in: hFile=0x360, lpBuffer=0x278ec88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x34d520, lpOverlapped=0x0 | out: lpBuffer=0x278ec88*, lpNumberOfBytesRead=0x34d520*=0x33e, lpOverlapped=0x0) returned 1 [0298.463] WriteFile (in: hFile=0x364, lpBuffer=0x2790480*, nNumberOfBytesToWrite=0x340, lpNumberOfBytesWritten=0x34d4e4, lpOverlapped=0x0 | out: lpBuffer=0x2790480*, lpNumberOfBytesWritten=0x34d4e4*=0x340, lpOverlapped=0x0) returned 1 [0298.464] CloseHandle (hObject=0x364) returned 1 [0298.464] CloseHandle (hObject=0x360) returned 1 [0298.464] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\readme.txt")) returned 1 [0298.466] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d694, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\readme.txt", lpFilePart=0x0) returned 0x2e [0298.466] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\readme.txt", nBufferLength=0x105, lpBuffer=0x34cf80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\readme.txt", lpFilePart=0x0) returned 0x2e [0298.466] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34d498) returned 1 [0298.467] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0298.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34c2b8) returned 1 [0298.469] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\readme.txt")) returned 0 [0298.469] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d694, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\readme.txt", lpFilePart=0x0) returned 0x2e [0298.470] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\readme.txt", nBufferLength=0x105, lpBuffer=0x34cf80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\readme.txt", lpFilePart=0x0) returned 0x2e [0298.470] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34d498) returned 1 [0298.470] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0298.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34c2b8) returned 1 [0298.472] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\readme.txt")) returned 0 [0298.472] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d694, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\readme.txt", lpFilePart=0x0) returned 0x2e [0298.473] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\readme.txt", nBufferLength=0x105, lpBuffer=0x34cf80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\readme.txt", lpFilePart=0x0) returned 0x2e [0298.473] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34d498) returned 1 [0298.473] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0298.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34c2b8) returned 1 [0298.474] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\readme.txt")) returned 0 [0298.475] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d694, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\readme.txt", lpFilePart=0x0) returned 0x2e [0298.476] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\readme.txt", nBufferLength=0x105, lpBuffer=0x34cf80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\readme.txt", lpFilePart=0x0) returned 0x2e [0298.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34d498) returned 1 [0298.476] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0298.477] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34c2b8) returned 1 [0298.477] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\readme.txt")) returned 0 [0298.478] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d694, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\readme.txt", lpFilePart=0x0) returned 0x2e [0298.479] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\readme.txt", nBufferLength=0x105, lpBuffer=0x34cf80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\readme.txt", lpFilePart=0x0) returned 0x2e [0298.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34d498) returned 1 [0298.479] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0298.480] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34c2b8) returned 1 [0298.480] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\readme.txt")) returned 0 [0298.481] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34d650) returned 1 [0298.481] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_", nBufferLength=0x105, lpBuffer=0x34d130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_", lpFilePart=0x0) returned 0x2c [0298.481] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\*", lpFindFileData=0x34d400 | out: lpFindFileData=0x34d400*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x872e87c0, ftCreationTime.dwHighDateTime=0x1d75aab, ftLastAccessTime.dwLowDateTime=0x235fb30, ftLastAccessTime.dwHighDateTime=0x1d763ba, ftLastWriteTime.dwLowDateTime=0x235fb30, ftLastWriteTime.dwHighDateTime=0x1d763ba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x47de80 [0298.481] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x872e87c0, ftCreationTime.dwHighDateTime=0x1d75aab, ftLastAccessTime.dwLowDateTime=0x235fb30, ftLastAccessTime.dwHighDateTime=0x1d763ba, ftLastWriteTime.dwLowDateTime=0x235fb30, ftLastWriteTime.dwHighDateTime=0x1d763ba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0298.481] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f404910, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f404910, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f404910, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x85a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2W4Hx.m4a.Poteston", cAlternateFileName="2W4HXM~1.POT")) returned 1 [0298.481] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f42aa70, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f42aa70, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f42aa70, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x14b20, dwReserved0=0x0, dwReserved1=0x0, cFileName="EoS9VOqOPP_4IHn.mp4.Poteston", cAlternateFileName="EOS9VO~1.POT")) returned 1 [0298.481] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f450bd0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f450bd0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f476d30, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x14630, dwReserved0=0x0, dwReserved1=0x0, cFileName="G ZkrQjDnE0.odt.Poteston", cAlternateFileName="GZKRQJ~1.POT")) returned 1 [0298.482] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f476d30, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f476d30, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f49ce90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x9880, dwReserved0=0x0, dwReserved1=0x0, cFileName="noCEUmxfykebkeyH9.flv.Poteston", cAlternateFileName="NOCEUM~1.POT")) returned 1 [0298.482] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f50f2b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x235fb30, ftLastAccessTime.dwHighDateTime=0x1d763ba, ftLastWriteTime.dwLowDateTime=0x2385c90, ftLastWriteTime.dwHighDateTime=0x1d763ba, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0298.482] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f535410, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f535410, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x2313870, ftLastWriteTime.dwHighDateTime=0x1d763ba, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0298.482] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f49ce90, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f49ce90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4c2ff0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xb140, dwReserved0=0x0, dwReserved1=0x0, cFileName="TbVG3PC0bCG2.png.Poteston", cAlternateFileName="TBVG3P~1.POT")) returned 1 [0298.482] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4c2ff0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f4c2ff0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4e9150, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xd1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XbvlKnZREA1k.mp3.Poteston", cAlternateFileName="XBVLKN~1.POT")) returned 1 [0298.482] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4e9150, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f4e9150, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4e9150, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8150, dwReserved0=0x0, dwReserved1=0x0, cFileName="XtD X6g3ZZH.m4a.Poteston", cAlternateFileName="XTDX6G~1.POT")) returned 1 [0298.482] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4e9150, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f4e9150, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4e9150, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8150, dwReserved0=0x0, dwReserved1=0x0, cFileName="XtD X6g3ZZH.m4a.Poteston", cAlternateFileName="XTDX6G~1.POT")) returned 0 [0298.482] FindClose (in: hFindFile=0x47de80 | out: hFindFile=0x47de80) returned 1 [0298.482] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34d3c0) returned 1 [0298.482] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34d620) returned 1 [0298.482] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34d650) returned 1 [0298.482] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_", nBufferLength=0x105, lpBuffer=0x34d130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_", lpFilePart=0x0) returned 0x2c [0298.482] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\*", lpFindFileData=0x34d400 | out: lpFindFileData=0x34d400*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x872e87c0, ftCreationTime.dwHighDateTime=0x1d75aab, ftLastAccessTime.dwLowDateTime=0x235fb30, ftLastAccessTime.dwHighDateTime=0x1d763ba, ftLastWriteTime.dwLowDateTime=0x235fb30, ftLastWriteTime.dwHighDateTime=0x1d763ba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x47de80 [0298.483] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x872e87c0, ftCreationTime.dwHighDateTime=0x1d75aab, ftLastAccessTime.dwLowDateTime=0x235fb30, ftLastAccessTime.dwHighDateTime=0x1d763ba, ftLastWriteTime.dwLowDateTime=0x235fb30, ftLastWriteTime.dwHighDateTime=0x1d763ba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0298.483] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f404910, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f404910, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f404910, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x85a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2W4Hx.m4a.Poteston", cAlternateFileName="2W4HXM~1.POT")) returned 1 [0298.483] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f42aa70, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f42aa70, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f42aa70, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x14b20, dwReserved0=0x0, dwReserved1=0x0, cFileName="EoS9VOqOPP_4IHn.mp4.Poteston", cAlternateFileName="EOS9VO~1.POT")) returned 1 [0298.483] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f450bd0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f450bd0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f476d30, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x14630, dwReserved0=0x0, dwReserved1=0x0, cFileName="G ZkrQjDnE0.odt.Poteston", cAlternateFileName="GZKRQJ~1.POT")) returned 1 [0298.483] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f476d30, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f476d30, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f49ce90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x9880, dwReserved0=0x0, dwReserved1=0x0, cFileName="noCEUmxfykebkeyH9.flv.Poteston", cAlternateFileName="NOCEUM~1.POT")) returned 1 [0298.483] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f50f2b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x235fb30, ftLastAccessTime.dwHighDateTime=0x1d763ba, ftLastWriteTime.dwLowDateTime=0x2385c90, ftLastWriteTime.dwHighDateTime=0x1d763ba, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0298.483] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f535410, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f535410, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x2313870, ftLastWriteTime.dwHighDateTime=0x1d763ba, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0298.483] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f49ce90, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f49ce90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4c2ff0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xb140, dwReserved0=0x0, dwReserved1=0x0, cFileName="TbVG3PC0bCG2.png.Poteston", cAlternateFileName="TBVG3P~1.POT")) returned 1 [0298.483] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4c2ff0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f4c2ff0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4e9150, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xd1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XbvlKnZREA1k.mp3.Poteston", cAlternateFileName="XBVLKN~1.POT")) returned 1 [0298.483] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4e9150, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f4e9150, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4e9150, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8150, dwReserved0=0x0, dwReserved1=0x0, cFileName="XtD X6g3ZZH.m4a.Poteston", cAlternateFileName="XTDX6G~1.POT")) returned 1 [0298.483] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0298.483] FindClose (in: hFindFile=0x47de80 | out: hFindFile=0x47de80) returned 1 [0298.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34d3c0) returned 1 [0298.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34d620) returned 1 [0298.495] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d158, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.496] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34ca44, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.496] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34cf5c) returned 1 [0298.496] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x360 [0298.496] GetFileType (hFile=0x360) returned 0x1 [0298.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34cf58) returned 1 [0298.496] GetFileType (hFile=0x360) returned 0x1 [0298.497] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt.Poteston", nBufferLength=0x105, lpBuffer=0x34ca44, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt.Poteston", lpFilePart=0x0) returned 0x40 [0298.497] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34cf5c) returned 1 [0298.497] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt.Poteston" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x364 [0298.497] GetFileType (hFile=0x364) returned 0x1 [0298.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34cf58) returned 1 [0298.497] GetFileType (hFile=0x364) returned 0x1 [0298.497] SetEndOfFile (hFile=0x364) returned 1 [0298.500] GetFileSize (in: hFile=0x360, lpFileSizeHigh=0x34d040 | out: lpFileSizeHigh=0x34d040*=0x0) returned 0x33e [0298.500] ReadFile (in: hFile=0x360, lpBuffer=0x27a169c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x34cfe4, lpOverlapped=0x0 | out: lpBuffer=0x27a169c*, lpNumberOfBytesRead=0x34cfe4*=0x33e, lpOverlapped=0x0) returned 1 [0298.500] WriteFile (in: hFile=0x364, lpBuffer=0x27a2e88*, nNumberOfBytesToWrite=0x340, lpNumberOfBytesWritten=0x34cfa8, lpOverlapped=0x0 | out: lpBuffer=0x27a2e88*, lpNumberOfBytesWritten=0x34cfa8*=0x340, lpOverlapped=0x0) returned 1 [0298.501] CloseHandle (hObject=0x364) returned 1 [0298.501] CloseHandle (hObject=0x360) returned 1 [0298.501] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 1 [0298.503] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d158, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.503] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34ca44, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.503] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34cf5c) returned 1 [0298.503] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0298.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34bd78) returned 1 [0298.505] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0298.506] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d158, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.507] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34ca44, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.507] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34cf5c) returned 1 [0298.507] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0298.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34bd78) returned 1 [0298.509] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0298.509] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d158, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.511] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34ca44, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34cf5c) returned 1 [0298.511] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0298.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34bd78) returned 1 [0298.513] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0298.513] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d158, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.514] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34ca44, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.515] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34cf5c) returned 1 [0298.517] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0298.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34bd78) returned 1 [0298.518] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0298.519] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d158, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.520] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34ca44, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.520] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34cf5c) returned 1 [0298.520] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0298.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34bd78) returned 1 [0298.522] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0298.523] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d158, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.524] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34ca44, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.524] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34cf5c) returned 1 [0298.524] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0298.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34bd78) returned 1 [0298.526] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0298.526] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d158, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.527] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34ca44, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.527] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34cf5c) returned 1 [0298.527] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0298.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34bd78) returned 1 [0298.528] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0298.529] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d158, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.529] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34ca44, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.529] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34cf5c) returned 1 [0298.530] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0298.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34bd78) returned 1 [0298.538] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0298.545] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.545] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34d910) returned 1 [0298.546] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x360 [0298.547] GetFileType (hFile=0x360) returned 0x1 [0298.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34d90c) returned 1 [0298.547] GetFileType (hFile=0x360) returned 0x1 [0298.547] WriteFile (in: hFile=0x360, lpBuffer=0x27b6e30*, nNumberOfBytesToWrite=0x33e, lpNumberOfBytesWritten=0x34d980, lpOverlapped=0x0 | out: lpBuffer=0x27b6e30*, lpNumberOfBytesWritten=0x34d980*=0x33e, lpOverlapped=0x0) returned 1 [0298.548] CloseHandle (hObject=0x360) returned 1 [0298.555] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34d650) returned 1 [0298.555] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_", nBufferLength=0x105, lpBuffer=0x34d130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_", lpFilePart=0x0) returned 0x2c [0298.555] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\*", lpFindFileData=0x34d400 | out: lpFindFileData=0x34d400*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x872e87c0, ftCreationTime.dwHighDateTime=0x1d75aab, ftLastAccessTime.dwLowDateTime=0x246a4d0, ftLastAccessTime.dwHighDateTime=0x1d763ba, ftLastWriteTime.dwLowDateTime=0x246a4d0, ftLastWriteTime.dwHighDateTime=0x1d763ba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x47de80 [0298.555] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x872e87c0, ftCreationTime.dwHighDateTime=0x1d75aab, ftLastAccessTime.dwLowDateTime=0x246a4d0, ftLastAccessTime.dwHighDateTime=0x1d763ba, ftLastWriteTime.dwLowDateTime=0x246a4d0, ftLastWriteTime.dwHighDateTime=0x1d763ba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0298.555] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f404910, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f404910, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f404910, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x85a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2W4Hx.m4a.Poteston", cAlternateFileName="2W4HXM~1.POT")) returned 1 [0298.555] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f42aa70, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f42aa70, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f42aa70, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x14b20, dwReserved0=0x0, dwReserved1=0x0, cFileName="EoS9VOqOPP_4IHn.mp4.Poteston", cAlternateFileName="EOS9VO~1.POT")) returned 1 [0298.555] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f450bd0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f450bd0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f476d30, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x14630, dwReserved0=0x0, dwReserved1=0x0, cFileName="G ZkrQjDnE0.odt.Poteston", cAlternateFileName="GZKRQJ~1.POT")) returned 1 [0298.555] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f476d30, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f476d30, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f49ce90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x9880, dwReserved0=0x0, dwReserved1=0x0, cFileName="noCEUmxfykebkeyH9.flv.Poteston", cAlternateFileName="NOCEUM~1.POT")) returned 1 [0298.556] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f50f2b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x246a4d0, ftLastAccessTime.dwHighDateTime=0x1d763ba, ftLastWriteTime.dwLowDateTime=0x246a4d0, ftLastWriteTime.dwHighDateTime=0x1d763ba, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0298.556] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f535410, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f535410, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x23f80b0, ftLastWriteTime.dwHighDateTime=0x1d763ba, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0298.556] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f49ce90, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f49ce90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4c2ff0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xb140, dwReserved0=0x0, dwReserved1=0x0, cFileName="TbVG3PC0bCG2.png.Poteston", cAlternateFileName="TBVG3P~1.POT")) returned 1 [0298.556] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4c2ff0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f4c2ff0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4e9150, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xd1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XbvlKnZREA1k.mp3.Poteston", cAlternateFileName="XBVLKN~1.POT")) returned 1 [0298.556] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4e9150, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f4e9150, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4e9150, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8150, dwReserved0=0x0, dwReserved1=0x0, cFileName="XtD X6g3ZZH.m4a.Poteston", cAlternateFileName="XTDX6G~1.POT")) returned 1 [0298.556] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4e9150, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f4e9150, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4e9150, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8150, dwReserved0=0x0, dwReserved1=0x0, cFileName="XtD X6g3ZZH.m4a.Poteston", cAlternateFileName="XTDX6G~1.POT")) returned 0 [0298.556] FindClose (in: hFindFile=0x47de80 | out: hFindFile=0x47de80) returned 1 [0298.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34d3c0) returned 1 [0298.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34d620) returned 1 [0298.556] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34d650) returned 1 [0298.556] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_", nBufferLength=0x105, lpBuffer=0x34d130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_", lpFilePart=0x0) returned 0x2c [0298.557] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\*", lpFindFileData=0x34d400 | out: lpFindFileData=0x34d400*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x872e87c0, ftCreationTime.dwHighDateTime=0x1d75aab, ftLastAccessTime.dwLowDateTime=0x246a4d0, ftLastAccessTime.dwHighDateTime=0x1d763ba, ftLastWriteTime.dwLowDateTime=0x246a4d0, ftLastWriteTime.dwHighDateTime=0x1d763ba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x47de80 [0298.557] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x872e87c0, ftCreationTime.dwHighDateTime=0x1d75aab, ftLastAccessTime.dwLowDateTime=0x246a4d0, ftLastAccessTime.dwHighDateTime=0x1d763ba, ftLastWriteTime.dwLowDateTime=0x246a4d0, ftLastWriteTime.dwHighDateTime=0x1d763ba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0298.557] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f404910, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f404910, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f404910, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x85a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2W4Hx.m4a.Poteston", cAlternateFileName="2W4HXM~1.POT")) returned 1 [0298.557] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f42aa70, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f42aa70, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f42aa70, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x14b20, dwReserved0=0x0, dwReserved1=0x0, cFileName="EoS9VOqOPP_4IHn.mp4.Poteston", cAlternateFileName="EOS9VO~1.POT")) returned 1 [0298.557] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f450bd0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f450bd0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f476d30, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x14630, dwReserved0=0x0, dwReserved1=0x0, cFileName="G ZkrQjDnE0.odt.Poteston", cAlternateFileName="GZKRQJ~1.POT")) returned 1 [0298.557] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f476d30, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f476d30, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f49ce90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x9880, dwReserved0=0x0, dwReserved1=0x0, cFileName="noCEUmxfykebkeyH9.flv.Poteston", cAlternateFileName="NOCEUM~1.POT")) returned 1 [0298.557] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f50f2b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x246a4d0, ftLastAccessTime.dwHighDateTime=0x1d763ba, ftLastWriteTime.dwLowDateTime=0x246a4d0, ftLastWriteTime.dwHighDateTime=0x1d763ba, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0298.557] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f535410, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f535410, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x23f80b0, ftLastWriteTime.dwHighDateTime=0x1d763ba, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0298.557] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f49ce90, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f49ce90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4c2ff0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xb140, dwReserved0=0x0, dwReserved1=0x0, cFileName="TbVG3PC0bCG2.png.Poteston", cAlternateFileName="TBVG3P~1.POT")) returned 1 [0298.557] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4c2ff0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f4c2ff0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4e9150, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xd1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XbvlKnZREA1k.mp3.Poteston", cAlternateFileName="XBVLKN~1.POT")) returned 1 [0298.557] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4e9150, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f4e9150, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4e9150, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8150, dwReserved0=0x0, dwReserved1=0x0, cFileName="XtD X6g3ZZH.m4a.Poteston", cAlternateFileName="XTDX6G~1.POT")) returned 1 [0298.557] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0298.558] FindClose (in: hFindFile=0x47de80 | out: hFindFile=0x47de80) returned 1 [0298.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34d3c0) returned 1 [0298.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34d620) returned 1 [0298.561] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d158, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.561] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34ca44, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34cf5c) returned 1 [0298.562] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x360 [0298.562] GetFileType (hFile=0x360) returned 0x1 [0298.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34cf58) returned 1 [0298.562] GetFileType (hFile=0x360) returned 0x1 [0298.562] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt.Poteston", nBufferLength=0x105, lpBuffer=0x34ca44, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt.Poteston", lpFilePart=0x0) returned 0x40 [0298.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34cf5c) returned 1 [0298.563] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt.Poteston" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x364 [0298.563] GetFileType (hFile=0x364) returned 0x1 [0298.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34cf58) returned 1 [0298.563] GetFileType (hFile=0x364) returned 0x1 [0298.563] SetEndOfFile (hFile=0x364) returned 1 [0298.564] GetFileSize (in: hFile=0x360, lpFileSizeHigh=0x34d040 | out: lpFileSizeHigh=0x34d040*=0x0) returned 0x33e [0298.565] ReadFile (in: hFile=0x360, lpBuffer=0x27c59d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x34cfe4, lpOverlapped=0x0 | out: lpBuffer=0x27c59d8*, lpNumberOfBytesRead=0x34cfe4*=0x33e, lpOverlapped=0x0) returned 1 [0298.565] WriteFile (in: hFile=0x364, lpBuffer=0x27c71d0*, nNumberOfBytesToWrite=0x340, lpNumberOfBytesWritten=0x34cfa8, lpOverlapped=0x0 | out: lpBuffer=0x27c71d0*, lpNumberOfBytesWritten=0x34cfa8*=0x340, lpOverlapped=0x0) returned 1 [0298.566] CloseHandle (hObject=0x364) returned 1 [0298.567] CloseHandle (hObject=0x360) returned 1 [0298.567] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 1 [0298.568] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d158, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.568] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34ca44, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34cf5c) returned 1 [0298.569] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0298.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34bd78) returned 1 [0298.570] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0298.571] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d158, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.572] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34ca44, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.572] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34cf5c) returned 1 [0298.573] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0298.574] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34bd78) returned 1 [0298.574] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0298.575] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d158, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.576] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34ca44, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.576] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34cf5c) returned 1 [0298.577] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0298.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34bd78) returned 1 [0298.578] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0298.579] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d158, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.580] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34ca44, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.580] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34cf5c) returned 1 [0298.581] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0298.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34bd78) returned 1 [0298.582] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0298.583] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d158, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.584] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34ca44, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.584] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34cf5c) returned 1 [0298.584] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0298.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34bd78) returned 1 [0298.586] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0298.587] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d158, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.588] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34ca44, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.588] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34cf5c) returned 1 [0298.588] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0298.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34bd78) returned 1 [0298.590] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0298.590] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d158, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.591] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34ca44, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.591] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34cf5c) returned 1 [0298.591] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0298.593] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34bd78) returned 1 [0298.593] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0298.594] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d158, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.594] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34ca44, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.594] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34cf5c) returned 1 [0298.594] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0298.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34bd78) returned 1 [0298.596] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0298.607] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.608] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34d910) returned 1 [0298.608] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x360 [0298.608] GetFileType (hFile=0x360) returned 0x1 [0298.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34d90c) returned 1 [0298.608] GetFileType (hFile=0x360) returned 0x1 [0298.609] WriteFile (in: hFile=0x360, lpBuffer=0x27db178*, nNumberOfBytesToWrite=0x33e, lpNumberOfBytesWritten=0x34d980, lpOverlapped=0x0 | out: lpBuffer=0x27db178*, lpNumberOfBytesWritten=0x34d980*=0x33e, lpOverlapped=0x0) returned 1 [0298.610] CloseHandle (hObject=0x360) returned 1 [0298.618] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34d650) returned 1 [0298.619] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_", nBufferLength=0x105, lpBuffer=0x34d130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_", lpFilePart=0x0) returned 0x2c [0298.619] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\*", lpFindFileData=0x34d400 | out: lpFindFileData=0x34d400*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x872e87c0, ftCreationTime.dwHighDateTime=0x1d75aab, ftLastAccessTime.dwLowDateTime=0x24dc8f0, ftLastAccessTime.dwHighDateTime=0x1d763ba, ftLastWriteTime.dwLowDateTime=0x24dc8f0, ftLastWriteTime.dwHighDateTime=0x1d763ba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x47de80 [0298.619] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x872e87c0, ftCreationTime.dwHighDateTime=0x1d75aab, ftLastAccessTime.dwLowDateTime=0x24dc8f0, ftLastAccessTime.dwHighDateTime=0x1d763ba, ftLastWriteTime.dwLowDateTime=0x24dc8f0, ftLastWriteTime.dwHighDateTime=0x1d763ba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0298.619] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f404910, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f404910, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f404910, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x85a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2W4Hx.m4a.Poteston", cAlternateFileName="2W4HXM~1.POT")) returned 1 [0298.619] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f42aa70, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f42aa70, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f42aa70, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x14b20, dwReserved0=0x0, dwReserved1=0x0, cFileName="EoS9VOqOPP_4IHn.mp4.Poteston", cAlternateFileName="EOS9VO~1.POT")) returned 1 [0298.619] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f450bd0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f450bd0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f476d30, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x14630, dwReserved0=0x0, dwReserved1=0x0, cFileName="G ZkrQjDnE0.odt.Poteston", cAlternateFileName="GZKRQJ~1.POT")) returned 1 [0298.619] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f476d30, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f476d30, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f49ce90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x9880, dwReserved0=0x0, dwReserved1=0x0, cFileName="noCEUmxfykebkeyH9.flv.Poteston", cAlternateFileName="NOCEUM~1.POT")) returned 1 [0298.619] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f50f2b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x24dc8f0, ftLastAccessTime.dwHighDateTime=0x1d763ba, ftLastWriteTime.dwLowDateTime=0x2502a50, ftLastWriteTime.dwHighDateTime=0x1d763ba, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0298.620] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f535410, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f535410, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x2490630, ftLastWriteTime.dwHighDateTime=0x1d763ba, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0298.620] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f49ce90, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f49ce90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4c2ff0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xb140, dwReserved0=0x0, dwReserved1=0x0, cFileName="TbVG3PC0bCG2.png.Poteston", cAlternateFileName="TBVG3P~1.POT")) returned 1 [0298.620] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4c2ff0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f4c2ff0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4e9150, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xd1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XbvlKnZREA1k.mp3.Poteston", cAlternateFileName="XBVLKN~1.POT")) returned 1 [0298.620] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4e9150, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f4e9150, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4e9150, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8150, dwReserved0=0x0, dwReserved1=0x0, cFileName="XtD X6g3ZZH.m4a.Poteston", cAlternateFileName="XTDX6G~1.POT")) returned 1 [0298.620] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4e9150, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f4e9150, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4e9150, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8150, dwReserved0=0x0, dwReserved1=0x0, cFileName="XtD X6g3ZZH.m4a.Poteston", cAlternateFileName="XTDX6G~1.POT")) returned 0 [0298.620] FindClose (in: hFindFile=0x47de80 | out: hFindFile=0x47de80) returned 1 [0298.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34d3c0) returned 1 [0298.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34d620) returned 1 [0298.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34d650) returned 1 [0298.620] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_", nBufferLength=0x105, lpBuffer=0x34d130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_", lpFilePart=0x0) returned 0x2c [0298.620] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\*", lpFindFileData=0x34d400 | out: lpFindFileData=0x34d400*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x872e87c0, ftCreationTime.dwHighDateTime=0x1d75aab, ftLastAccessTime.dwLowDateTime=0x24dc8f0, ftLastAccessTime.dwHighDateTime=0x1d763ba, ftLastWriteTime.dwLowDateTime=0x24dc8f0, ftLastWriteTime.dwHighDateTime=0x1d763ba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x47de80 [0298.621] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x872e87c0, ftCreationTime.dwHighDateTime=0x1d75aab, ftLastAccessTime.dwLowDateTime=0x24dc8f0, ftLastAccessTime.dwHighDateTime=0x1d763ba, ftLastWriteTime.dwLowDateTime=0x24dc8f0, ftLastWriteTime.dwHighDateTime=0x1d763ba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0298.621] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f404910, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f404910, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f404910, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x85a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2W4Hx.m4a.Poteston", cAlternateFileName="2W4HXM~1.POT")) returned 1 [0298.621] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f42aa70, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f42aa70, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f42aa70, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x14b20, dwReserved0=0x0, dwReserved1=0x0, cFileName="EoS9VOqOPP_4IHn.mp4.Poteston", cAlternateFileName="EOS9VO~1.POT")) returned 1 [0298.621] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f450bd0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f450bd0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f476d30, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x14630, dwReserved0=0x0, dwReserved1=0x0, cFileName="G ZkrQjDnE0.odt.Poteston", cAlternateFileName="GZKRQJ~1.POT")) returned 1 [0298.621] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f476d30, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f476d30, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f49ce90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x9880, dwReserved0=0x0, dwReserved1=0x0, cFileName="noCEUmxfykebkeyH9.flv.Poteston", cAlternateFileName="NOCEUM~1.POT")) returned 1 [0298.621] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f50f2b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x24dc8f0, ftLastAccessTime.dwHighDateTime=0x1d763ba, ftLastWriteTime.dwLowDateTime=0x2502a50, ftLastWriteTime.dwHighDateTime=0x1d763ba, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0298.621] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f535410, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f535410, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x2490630, ftLastWriteTime.dwHighDateTime=0x1d763ba, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0298.621] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f49ce90, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f49ce90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4c2ff0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xb140, dwReserved0=0x0, dwReserved1=0x0, cFileName="TbVG3PC0bCG2.png.Poteston", cAlternateFileName="TBVG3P~1.POT")) returned 1 [0298.621] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4c2ff0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f4c2ff0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4e9150, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xd1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XbvlKnZREA1k.mp3.Poteston", cAlternateFileName="XBVLKN~1.POT")) returned 1 [0298.621] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4e9150, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f4e9150, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4e9150, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8150, dwReserved0=0x0, dwReserved1=0x0, cFileName="XtD X6g3ZZH.m4a.Poteston", cAlternateFileName="XTDX6G~1.POT")) returned 1 [0298.621] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0298.621] FindClose (in: hFindFile=0x47de80 | out: hFindFile=0x47de80) returned 1 [0298.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34d3c0) returned 1 [0298.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34d620) returned 1 [0298.630] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d158, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.631] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34ca44, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.631] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34cf5c) returned 1 [0298.631] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x360 [0298.631] GetFileType (hFile=0x360) returned 0x1 [0298.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34cf58) returned 1 [0298.631] GetFileType (hFile=0x360) returned 0x1 [0298.631] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt.Poteston", nBufferLength=0x105, lpBuffer=0x34ca44, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt.Poteston", lpFilePart=0x0) returned 0x40 [0298.632] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34cf5c) returned 1 [0298.632] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt.Poteston" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x364 [0298.632] GetFileType (hFile=0x364) returned 0x1 [0298.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34cf58) returned 1 [0298.632] GetFileType (hFile=0x364) returned 0x1 [0298.632] SetEndOfFile (hFile=0x364) returned 1 [0298.634] ReadFile (in: hFile=0x360, lpBuffer=0x27e9d14, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x34cfe4, lpOverlapped=0x0 | out: lpBuffer=0x27e9d14*, lpNumberOfBytesRead=0x34cfe4*=0x33e, lpOverlapped=0x0) returned 1 [0298.635] WriteFile (in: hFile=0x364, lpBuffer=0x27eb50c*, nNumberOfBytesToWrite=0x340, lpNumberOfBytesWritten=0x34cfa8, lpOverlapped=0x0 | out: lpBuffer=0x27eb50c*, lpNumberOfBytesWritten=0x34cfa8*=0x340, lpOverlapped=0x0) returned 1 [0298.637] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 1 [0298.638] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d158, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.638] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34ca44, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.638] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34cf5c) returned 1 [0298.639] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0298.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34bd78) returned 1 [0298.641] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0298.642] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d158, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.643] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34ca44, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34cf5c) returned 1 [0298.643] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0298.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34bd78) returned 1 [0298.644] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0298.645] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d158, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.646] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34ca44, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34cf5c) returned 1 [0298.646] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0298.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34bd78) returned 1 [0298.647] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0298.648] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d158, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.649] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34ca44, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34cf5c) returned 1 [0298.649] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0298.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34bd78) returned 1 [0298.650] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0298.651] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d158, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.652] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34ca44, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34cf5c) returned 1 [0298.652] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0298.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34bd78) returned 1 [0298.653] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0298.654] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d158, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.655] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34cf5c) returned 1 [0298.655] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0298.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34bd78) returned 1 [0298.657] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0298.657] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34cf5c) returned 1 [0298.657] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0298.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34bd78) returned 1 [0298.659] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0298.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34cf5c) returned 1 [0298.660] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0298.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34bd78) returned 1 [0298.661] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0298.669] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34d910) returned 1 [0298.669] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x360 [0298.670] GetFileType (hFile=0x360) returned 0x1 [0298.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34d90c) returned 1 [0298.670] GetFileType (hFile=0x360) returned 0x1 [0298.670] WriteFile (in: hFile=0x360, lpBuffer=0x27ff4b4*, nNumberOfBytesToWrite=0x33e, lpNumberOfBytesWritten=0x34d980, lpOverlapped=0x0 | out: lpBuffer=0x27ff4b4*, lpNumberOfBytesWritten=0x34d980*=0x33e, lpOverlapped=0x0) returned 1 [0298.671] CloseHandle (hObject=0x360) returned 1 [0298.678] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34d650) returned 1 [0298.678] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_", nBufferLength=0x105, lpBuffer=0x34d130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_", lpFilePart=0x0) returned 0x2c [0298.679] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\*", lpFindFileData=0x34d400 | out: lpFindFileData=0x34d400*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x872e87c0, ftCreationTime.dwHighDateTime=0x1d75aab, ftLastAccessTime.dwLowDateTime=0x2574e70, ftLastAccessTime.dwHighDateTime=0x1d763ba, ftLastWriteTime.dwLowDateTime=0x2574e70, ftLastWriteTime.dwHighDateTime=0x1d763ba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x47de80 [0298.679] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x872e87c0, ftCreationTime.dwHighDateTime=0x1d75aab, ftLastAccessTime.dwLowDateTime=0x2574e70, ftLastAccessTime.dwHighDateTime=0x1d763ba, ftLastWriteTime.dwLowDateTime=0x2574e70, ftLastWriteTime.dwHighDateTime=0x1d763ba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0298.679] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f404910, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f404910, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f404910, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x85a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2W4Hx.m4a.Poteston", cAlternateFileName="2W4HXM~1.POT")) returned 1 [0298.679] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f42aa70, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f42aa70, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f42aa70, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x14b20, dwReserved0=0x0, dwReserved1=0x0, cFileName="EoS9VOqOPP_4IHn.mp4.Poteston", cAlternateFileName="EOS9VO~1.POT")) returned 1 [0298.679] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f450bd0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f450bd0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f476d30, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x14630, dwReserved0=0x0, dwReserved1=0x0, cFileName="G ZkrQjDnE0.odt.Poteston", cAlternateFileName="GZKRQJ~1.POT")) returned 1 [0298.679] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f476d30, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f476d30, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f49ce90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x9880, dwReserved0=0x0, dwReserved1=0x0, cFileName="noCEUmxfykebkeyH9.flv.Poteston", cAlternateFileName="NOCEUM~1.POT")) returned 1 [0298.679] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f50f2b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x2574e70, ftLastAccessTime.dwHighDateTime=0x1d763ba, ftLastWriteTime.dwLowDateTime=0x259afd0, ftLastWriteTime.dwHighDateTime=0x1d763ba, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0298.679] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f535410, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f535410, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x2528bb0, ftLastWriteTime.dwHighDateTime=0x1d763ba, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0298.679] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f49ce90, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f49ce90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4c2ff0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xb140, dwReserved0=0x0, dwReserved1=0x0, cFileName="TbVG3PC0bCG2.png.Poteston", cAlternateFileName="TBVG3P~1.POT")) returned 1 [0298.679] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4c2ff0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f4c2ff0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4e9150, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xd1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XbvlKnZREA1k.mp3.Poteston", cAlternateFileName="XBVLKN~1.POT")) returned 1 [0298.679] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4e9150, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f4e9150, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4e9150, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8150, dwReserved0=0x0, dwReserved1=0x0, cFileName="XtD X6g3ZZH.m4a.Poteston", cAlternateFileName="XTDX6G~1.POT")) returned 1 [0298.679] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4e9150, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f4e9150, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4e9150, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8150, dwReserved0=0x0, dwReserved1=0x0, cFileName="XtD X6g3ZZH.m4a.Poteston", cAlternateFileName="XTDX6G~1.POT")) returned 0 [0298.680] FindClose (in: hFindFile=0x47de80 | out: hFindFile=0x47de80) returned 1 [0298.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34d3c0) returned 1 [0298.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34d620) returned 1 [0298.680] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34d650) returned 1 [0298.680] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_", nBufferLength=0x105, lpBuffer=0x34d130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_", lpFilePart=0x0) returned 0x2c [0298.680] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\*", lpFindFileData=0x34d400 | out: lpFindFileData=0x34d400*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x872e87c0, ftCreationTime.dwHighDateTime=0x1d75aab, ftLastAccessTime.dwLowDateTime=0x2574e70, ftLastAccessTime.dwHighDateTime=0x1d763ba, ftLastWriteTime.dwLowDateTime=0x2574e70, ftLastWriteTime.dwHighDateTime=0x1d763ba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x47de80 [0298.680] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x872e87c0, ftCreationTime.dwHighDateTime=0x1d75aab, ftLastAccessTime.dwLowDateTime=0x2574e70, ftLastAccessTime.dwHighDateTime=0x1d763ba, ftLastWriteTime.dwLowDateTime=0x2574e70, ftLastWriteTime.dwHighDateTime=0x1d763ba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0298.680] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f404910, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f404910, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f404910, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x85a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2W4Hx.m4a.Poteston", cAlternateFileName="2W4HXM~1.POT")) returned 1 [0298.680] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f42aa70, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f42aa70, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f42aa70, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x14b20, dwReserved0=0x0, dwReserved1=0x0, cFileName="EoS9VOqOPP_4IHn.mp4.Poteston", cAlternateFileName="EOS9VO~1.POT")) returned 1 [0298.680] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f450bd0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f450bd0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f476d30, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x14630, dwReserved0=0x0, dwReserved1=0x0, cFileName="G ZkrQjDnE0.odt.Poteston", cAlternateFileName="GZKRQJ~1.POT")) returned 1 [0298.680] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f476d30, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f476d30, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f49ce90, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x9880, dwReserved0=0x0, dwReserved1=0x0, cFileName="noCEUmxfykebkeyH9.flv.Poteston", cAlternateFileName="NOCEUM~1.POT")) returned 1 [0298.680] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f50f2b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x2574e70, ftLastAccessTime.dwHighDateTime=0x1d763ba, ftLastWriteTime.dwLowDateTime=0x259afd0, ftLastWriteTime.dwHighDateTime=0x1d763ba, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0298.680] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f535410, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f535410, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x2528bb0, ftLastWriteTime.dwHighDateTime=0x1d763ba, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0298.680] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f49ce90, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f49ce90, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4c2ff0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xb140, dwReserved0=0x0, dwReserved1=0x0, cFileName="TbVG3PC0bCG2.png.Poteston", cAlternateFileName="TBVG3P~1.POT")) returned 1 [0298.681] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4c2ff0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f4c2ff0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4e9150, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xd1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XbvlKnZREA1k.mp3.Poteston", cAlternateFileName="XBVLKN~1.POT")) returned 1 [0298.681] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4e9150, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f4e9150, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f4e9150, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x8150, dwReserved0=0x0, dwReserved1=0x0, cFileName="XtD X6g3ZZH.m4a.Poteston", cAlternateFileName="XTDX6G~1.POT")) returned 1 [0298.681] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d408 | out: lpFindFileData=0x34d408*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0298.681] FindClose (in: hFindFile=0x47de80 | out: hFindFile=0x47de80) returned 1 [0298.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34d3c0) returned 1 [0298.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34d620) returned 1 [0298.688] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d158, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.689] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34ca44, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34cf5c) returned 1 [0298.689] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x360 [0298.689] GetFileType (hFile=0x360) returned 0x1 [0298.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34cf58) returned 1 [0298.689] GetFileType (hFile=0x360) returned 0x1 [0298.689] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt.Poteston", nBufferLength=0x105, lpBuffer=0x34ca44, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt.Poteston", lpFilePart=0x0) returned 0x40 [0298.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34cf5c) returned 1 [0298.690] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt.Poteston" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x364 [0298.690] GetFileType (hFile=0x364) returned 0x1 [0298.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34cf58) returned 1 [0298.690] GetFileType (hFile=0x364) returned 0x1 [0298.690] SetEndOfFile (hFile=0x364) returned 1 [0298.691] GetFileSize (in: hFile=0x360, lpFileSizeHigh=0x34d040 | out: lpFileSizeHigh=0x34d040*=0x0) returned 0x33e [0298.691] ReadFile (in: hFile=0x360, lpBuffer=0x280e050, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x34cfe4, lpOverlapped=0x0 | out: lpBuffer=0x280e050*, lpNumberOfBytesRead=0x34cfe4*=0x33e, lpOverlapped=0x0) returned 1 [0298.691] WriteFile (in: hFile=0x364, lpBuffer=0x280f848*, nNumberOfBytesToWrite=0x340, lpNumberOfBytesWritten=0x34cfa8, lpOverlapped=0x0 | out: lpBuffer=0x280f848*, lpNumberOfBytesWritten=0x34cfa8*=0x340, lpOverlapped=0x0) returned 1 [0298.693] CloseHandle (hObject=0x364) returned 1 [0298.693] CloseHandle (hObject=0x360) returned 1 [0298.693] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 1 [0298.694] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d158, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.695] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34ca44, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34cf5c) returned 1 [0298.695] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0298.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34bd78) returned 1 [0298.697] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0298.698] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d158, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.699] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34ca44, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.699] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34cf5c) returned 1 [0298.699] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0298.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34bd78) returned 1 [0298.701] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0298.703] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d158, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.704] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34ca44, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.704] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34cf5c) returned 1 [0298.704] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0298.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34bd78) returned 1 [0298.706] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0298.707] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d158, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.708] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34ca44, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.708] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34cf5c) returned 1 [0298.708] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0298.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34bd78) returned 1 [0298.709] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0298.711] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d158, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.712] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34ca44, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34cf5c) returned 1 [0298.712] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0298.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34bd78) returned 1 [0298.713] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0298.714] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d158, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.715] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34ca44, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34cf5c) returned 1 [0298.715] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0298.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34bd78) returned 1 [0298.717] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0298.717] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d158, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.718] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34ca44, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34cf5c) returned 1 [0298.718] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0298.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34bd78) returned 1 [0298.720] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0298.720] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d158, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.721] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34ca44, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34cf5c) returned 1 [0298.721] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0298.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34bd78) returned 1 [0298.722] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt")) returned 0 [0298.733] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt", lpFilePart=0x0) returned 0x37 [0298.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34d910) returned 1 [0298.733] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\UkCm4Dq_\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\ukcm4dq_\\readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x360 [0298.734] GetFileType (hFile=0x360) returned 0x1 [0298.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34d90c) returned 1 [0298.734] GetFileType (hFile=0x360) returned 0x1 [0298.735] WriteFile (in: hFile=0x360, lpBuffer=0x28237f0*, nNumberOfBytesToWrite=0x33e, lpNumberOfBytesWritten=0x34d980, lpOverlapped=0x0 | out: lpBuffer=0x28237f0*, lpNumberOfBytesWritten=0x34d980*=0x33e, lpOverlapped=0x0) returned 1 [0298.737] CloseHandle (hObject=0x360) returned 1 [0298.738] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d934, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\readme.txt", lpFilePart=0x0) returned 0x2e [0298.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34de4c) returned 1 [0298.738] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LyNdnxnx\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\lyndnxnx\\readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x360 [0298.739] GetFileType (hFile=0x360) returned 0x1 [0298.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34de48) returned 1 [0298.739] GetFileType (hFile=0x360) returned 0x1 [0298.739] WriteFile (in: hFile=0x360, lpBuffer=0x2827dc8*, nNumberOfBytesToWrite=0x33e, lpNumberOfBytesWritten=0x34debc, lpOverlapped=0x0 | out: lpBuffer=0x2827dc8*, lpNumberOfBytesWritten=0x34debc*=0x33e, lpOverlapped=0x0) returned 1 [0298.741] CloseHandle (hObject=0x360) returned 1 [0298.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34db8c) returned 1 [0298.757] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva", nBufferLength=0x105, lpBuffer=0x34d66c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva", lpFilePart=0x0) returned 0x22 [0298.758] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\*", lpFindFileData=0x34d93c | out: lpFindFileData=0x34d93c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9d12120, ftCreationTime.dwHighDateTime=0x1d75823, ftLastAccessTime.dwLowDateTime=0x2208ed0, ftLastAccessTime.dwHighDateTime=0x1d763ba, ftLastWriteTime.dwLowDateTime=0x2208ed0, ftLastWriteTime.dwHighDateTime=0x1d763ba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x47de80 [0298.758] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d944 | out: lpFindFileData=0x34d944*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9d12120, ftCreationTime.dwHighDateTime=0x1d75823, ftLastAccessTime.dwLowDateTime=0x2208ed0, ftLastAccessTime.dwHighDateTime=0x1d763ba, ftLastWriteTime.dwLowDateTime=0x2208ed0, ftLastWriteTime.dwHighDateTime=0x1d763ba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0298.758] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d944 | out: lpFindFileData=0x34d944*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f287b50, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f287b50, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f2adcb0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x74b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DJIlxXh.pptx.Poteston", cAlternateFileName="DJILXX~1.POT")) returned 1 [0298.758] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d944 | out: lpFindFileData=0x34d944*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f2adcb0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f2adcb0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f2d3e10, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x143f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="epH-_N hU0l.jpg.Poteston", cAlternateFileName="EPH-_N~1.POT")) returned 1 [0298.758] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d944 | out: lpFindFileData=0x34d944*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f2f9f70, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f2f9f70, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f3200d0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x2dc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nGUytBPJlqP.rtf.Poteston", cAlternateFileName="NGUYTB~1.POT")) returned 1 [0298.758] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d944 | out: lpFindFileData=0x34d944*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f3de7b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x2208ed0, ftLastAccessTime.dwHighDateTime=0x1d763ba, ftLastWriteTime.dwLowDateTime=0x222f030, ftLastWriteTime.dwHighDateTime=0x1d763ba, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0298.758] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d944 | out: lpFindFileData=0x34d944*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f808e30, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f808e30, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x2196ab0, ftLastWriteTime.dwHighDateTime=0x1d763ba, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0298.758] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d944 | out: lpFindFileData=0x34d944*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f3200d0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f3200d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f346230, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xe430, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPnXfcP7CFdFT0XeBuv6.ots.Poteston", cAlternateFileName="SPNXFC~1.POT")) returned 1 [0298.759] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d944 | out: lpFindFileData=0x34d944*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f36c390, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f36c390, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f36c390, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="UapJbgd7.flv.Poteston", cAlternateFileName="UAPJBG~1.POT")) returned 1 [0298.759] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d944 | out: lpFindFileData=0x34d944*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f3924f0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f3924f0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f3b8650, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xcd80, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc-4n.png.Poteston", cAlternateFileName="VC-4NP~1.POT")) returned 1 [0298.759] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d944 | out: lpFindFileData=0x34d944*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f3924f0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f3924f0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f3b8650, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xcd80, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc-4n.png.Poteston", cAlternateFileName="VC-4NP~1.POT")) returned 0 [0298.759] FindClose (in: hFindFile=0x47de80 | out: hFindFile=0x47de80) returned 1 [0298.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34d8fc) returned 1 [0298.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34db5c) returned 1 [0298.759] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34db8c) returned 1 [0298.759] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva", nBufferLength=0x105, lpBuffer=0x34d66c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva", lpFilePart=0x0) returned 0x22 [0298.759] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\*", lpFindFileData=0x34d93c | out: lpFindFileData=0x34d93c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9d12120, ftCreationTime.dwHighDateTime=0x1d75823, ftLastAccessTime.dwLowDateTime=0x2208ed0, ftLastAccessTime.dwHighDateTime=0x1d763ba, ftLastWriteTime.dwLowDateTime=0x2208ed0, ftLastWriteTime.dwHighDateTime=0x1d763ba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x47de80 [0298.760] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d944 | out: lpFindFileData=0x34d944*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9d12120, ftCreationTime.dwHighDateTime=0x1d75823, ftLastAccessTime.dwLowDateTime=0x2208ed0, ftLastAccessTime.dwHighDateTime=0x1d763ba, ftLastWriteTime.dwLowDateTime=0x2208ed0, ftLastWriteTime.dwHighDateTime=0x1d763ba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0298.760] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d944 | out: lpFindFileData=0x34d944*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f287b50, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f287b50, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f2adcb0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x74b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DJIlxXh.pptx.Poteston", cAlternateFileName="DJILXX~1.POT")) returned 1 [0298.760] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d944 | out: lpFindFileData=0x34d944*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f2adcb0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f2adcb0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f2d3e10, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x143f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="epH-_N hU0l.jpg.Poteston", cAlternateFileName="EPH-_N~1.POT")) returned 1 [0298.760] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d944 | out: lpFindFileData=0x34d944*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f2f9f70, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f2f9f70, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f3200d0, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x2dc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nGUytBPJlqP.rtf.Poteston", cAlternateFileName="NGUYTB~1.POT")) returned 1 [0298.760] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d944 | out: lpFindFileData=0x34d944*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f3de7b0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x2208ed0, ftLastAccessTime.dwHighDateTime=0x1d763ba, ftLastWriteTime.dwLowDateTime=0x222f030, ftLastWriteTime.dwHighDateTime=0x1d763ba, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt", cAlternateFileName="")) returned 1 [0298.760] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d944 | out: lpFindFileData=0x34d944*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f808e30, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f808e30, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x2196ab0, ftLastWriteTime.dwHighDateTime=0x1d763ba, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="readme.txt.Poteston", cAlternateFileName="README~1.POT")) returned 1 [0298.760] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d944 | out: lpFindFileData=0x34d944*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f3200d0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f3200d0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f346230, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xe430, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPnXfcP7CFdFT0XeBuv6.ots.Poteston", cAlternateFileName="SPNXFC~1.POT")) returned 1 [0298.760] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d944 | out: lpFindFileData=0x34d944*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f36c390, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f36c390, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f36c390, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="UapJbgd7.flv.Poteston", cAlternateFileName="UAPJBG~1.POT")) returned 1 [0298.760] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d944 | out: lpFindFileData=0x34d944*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f3924f0, ftCreationTime.dwHighDateTime=0x1d763b9, ftLastAccessTime.dwLowDateTime=0x7f3924f0, ftLastAccessTime.dwHighDateTime=0x1d763b9, ftLastWriteTime.dwLowDateTime=0x7f3b8650, ftLastWriteTime.dwHighDateTime=0x1d763b9, nFileSizeHigh=0x0, nFileSizeLow=0xcd80, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc-4n.png.Poteston", cAlternateFileName="VC-4NP~1.POT")) returned 1 [0298.760] FindNextFileW (in: hFindFile=0x47de80, lpFindFileData=0x34d944 | out: lpFindFileData=0x34d944*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0298.760] FindClose (in: hFindFile=0x47de80 | out: hFindFile=0x47de80) returned 1 [0298.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34d8fc) returned 1 [0298.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34db5c) returned 1 [0298.762] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d694, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt", lpFilePart=0x0) returned 0x2d [0298.762] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt", nBufferLength=0x105, lpBuffer=0x34cf80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt", lpFilePart=0x0) returned 0x2d [0298.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34d498) returned 1 [0298.763] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x360 [0298.763] GetFileType (hFile=0x360) returned 0x1 [0298.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34d494) returned 1 [0298.763] GetFileType (hFile=0x360) returned 0x1 [0298.763] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt.Poteston", nBufferLength=0x105, lpBuffer=0x34cf80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt.Poteston", lpFilePart=0x0) returned 0x36 [0298.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34d498) returned 1 [0298.764] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt.Poteston" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\readme.txt.poteston"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x364 [0298.764] GetFileType (hFile=0x364) returned 0x1 [0298.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34d494) returned 1 [0298.764] GetFileType (hFile=0x364) returned 0x1 [0298.764] SetEndOfFile (hFile=0x364) returned 1 [0298.765] GetFileSize (in: hFile=0x360, lpFileSizeHigh=0x34d57c | out: lpFileSizeHigh=0x34d57c*=0x0) returned 0x33e [0298.765] ReadFile (in: hFile=0x360, lpBuffer=0x2839e30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x34d520, lpOverlapped=0x0 | out: lpBuffer=0x2839e30*, lpNumberOfBytesRead=0x34d520*=0x33e, lpOverlapped=0x0) returned 1 [0298.766] WriteFile (in: hFile=0x364, lpBuffer=0x283b628*, nNumberOfBytesToWrite=0x340, lpNumberOfBytesWritten=0x34d4e4, lpOverlapped=0x0 | out: lpBuffer=0x283b628*, lpNumberOfBytesWritten=0x34d4e4*=0x340, lpOverlapped=0x0) returned 1 [0298.767] CloseHandle (hObject=0x364) returned 1 [0298.768] CloseHandle (hObject=0x360) returned 1 [0298.768] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\readme.txt")) returned 1 [0298.769] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d694, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt", lpFilePart=0x0) returned 0x2d [0298.769] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt", nBufferLength=0x105, lpBuffer=0x34cf80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt", lpFilePart=0x0) returned 0x2d [0298.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34d498) returned 1 [0298.770] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0298.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34c2b8) returned 1 [0298.771] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\readme.txt")) returned 0 [0298.772] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d694, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt", lpFilePart=0x0) returned 0x2d [0298.773] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt", nBufferLength=0x105, lpBuffer=0x34cf80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt", lpFilePart=0x0) returned 0x2d [0298.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34d498) returned 1 [0298.774] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0298.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34c2b8) returned 1 [0298.775] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\readme.txt")) returned 0 [0298.777] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d694, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt", lpFilePart=0x0) returned 0x2d [0298.778] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt", nBufferLength=0x105, lpBuffer=0x34cf80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt", lpFilePart=0x0) returned 0x2d [0298.778] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34d498) returned 1 [0298.778] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0298.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34c2b8) returned 1 [0298.779] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\readme.txt")) returned 0 [0298.797] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d694, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt", lpFilePart=0x0) returned 0x2d [0298.798] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt", nBufferLength=0x105, lpBuffer=0x34cf80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt", lpFilePart=0x0) returned 0x2d [0298.798] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34d498) returned 1 [0298.798] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0298.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34c2b8) returned 1 [0298.799] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\readme.txt")) returned 0 [0298.800] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d694, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt", lpFilePart=0x0) returned 0x2d [0298.801] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt", nBufferLength=0x105, lpBuffer=0x34cf80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt", lpFilePart=0x0) returned 0x2d [0298.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34d498) returned 1 [0298.802] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0298.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34c2b8) returned 1 [0298.803] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\readme.txt")) returned 0 [0298.804] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d694, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt", lpFilePart=0x0) returned 0x2d [0298.805] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt", nBufferLength=0x105, lpBuffer=0x34cf80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt", lpFilePart=0x0) returned 0x2d [0298.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34d498) returned 1 [0298.805] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0298.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34c2b8) returned 1 [0298.807] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\readme.txt")) returned 0 [0298.807] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt", nBufferLength=0x105, lpBuffer=0x34d694, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt", lpFilePart=0x0) returned 0x2d [0298.808] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt", nBufferLength=0x105, lpBuffer=0x34cf80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt", lpFilePart=0x0) returned 0x2d [0298.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x34d498) returned 1 [0298.808] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0298.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x34c2b8) returned 1 [0298.810] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\9a-Wiva\\readme.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\9a-wiva\\readme.txt")) returned 0 Thread: id = 176 os_tid = 0x6d4 Thread: id = 177 os_tid = 0x6dc [0285.242] CoGetContextToken (in: pToken=0xcbf8dc | out: pToken=0xcbf8dc) returned 0x800401f0 [0285.243] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 Thread: id = 178 os_tid = 0x6e0 Thread: id = 179 os_tid = 0x33c Thread: id = 180 os_tid = 0x30c [0288.475] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 Thread: id = 181 os_tid = 0x31c [0288.598] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 Thread: id = 182 os_tid = 0x1c4 [0294.511] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0294.548] IIDFromString (in: lpsz="{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}", lpiid=0x4ecf03c | out: lpiid=0x4ecf03c) returned 0x0 [0294.554] CoGetClassObject (in: rclsid=0x45f7ec*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x74ed6bd4*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x4eced58 | out: ppv=0x4eced58*=0x46f4e0) returned 0x0 [0294.682] WbemDefPath:IUnknown:QueryInterface (in: This=0x46f4e0, riid=0x74e9dd3c*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x4ecef70 | out: ppvObject=0x4ecef70*=0x0) returned 0x80004002 [0294.682] WbemDefPath:IClassFactory:CreateInstance (in: This=0x46f4e0, pUnkOuter=0x0, riid=0x74d82a54*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x4ecef7c | out: ppvObject=0x4ecef7c*=0x46d170) returned 0x0 [0294.686] WbemDefPath:IUnknown:Release (This=0x46f4e0) returned 0x0 [0294.686] WbemDefPath:IUnknown:QueryInterface (in: This=0x46d170, riid=0x74d82a54*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x4eceb9c | out: ppvObject=0x4eceb9c*=0x46d170) returned 0x0 [0294.687] WbemDefPath:IUnknown:QueryInterface (in: This=0x46d170, riid=0x74e71b6c*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x4eceb50 | out: ppvObject=0x4eceb50*=0x0) returned 0x80004002 [0294.687] WbemDefPath:IUnknown:AddRef (This=0x46d170) returned 0x3 [0294.687] WbemDefPath:IUnknown:QueryInterface (in: This=0x46d170, riid=0x74e7182c*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x4ece4ac | out: ppvObject=0x4ece4ac*=0x0) returned 0x80004002 [0294.687] WbemDefPath:IUnknown:QueryInterface (in: This=0x46d170, riid=0x74e71764*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x4ece45c | out: ppvObject=0x4ece45c*=0x0) returned 0x80004002 [0294.687] WbemDefPath:IUnknown:QueryInterface (in: This=0x46d170, riid=0x74da1388*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x4ece468 | out: ppvObject=0x4ece468*=0x46f520) returned 0x0 [0294.687] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x46f520, riid=0x74d82a54*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x4ece470 | out: pCid=0x4ece470*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0294.687] WbemDefPath:IUnknown:Release (This=0x46f520) returned 0x3 [0294.687] CoGetContextToken (in: pToken=0x4ece4c8 | out: pToken=0x4ece4c8) returned 0x0 [0294.697] CoGetContextToken (in: pToken=0x4ece8dc | out: pToken=0x4ece8dc) returned 0x0 [0294.697] WbemDefPath:IUnknown:QueryInterface (in: This=0x46d170, riid=0x74e71aa8*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x4ece95c | out: ppvObject=0x4ece95c*=0x0) returned 0x80004002 [0294.697] WbemDefPath:IUnknown:Release (This=0x46d170) returned 0x2 [0294.697] WbemDefPath:IUnknown:Release (This=0x46d170) returned 0x1 [0294.697] SetEvent (hEvent=0x238) returned 1 [0296.269] CoGetClassObject (in: rclsid=0x45f7ec*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x74ed6bd4*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x4eced58 | out: ppv=0x4eced58*=0x4936c8) returned 0x0 [0296.269] WbemDefPath:IUnknown:QueryInterface (in: This=0x4936c8, riid=0x74e9dd3c*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x4ecef70 | out: ppvObject=0x4ecef70*=0x0) returned 0x80004002 [0296.269] WbemDefPath:IClassFactory:CreateInstance (in: This=0x4936c8, pUnkOuter=0x0, riid=0x74d82a54*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x4ecef7c | out: ppvObject=0x4ecef7c*=0x46d2c0) returned 0x0 [0296.270] WbemDefPath:IUnknown:Release (This=0x4936c8) returned 0x0 [0296.270] WbemDefPath:IUnknown:QueryInterface (in: This=0x46d2c0, riid=0x74d82a54*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x4eceb9c | out: ppvObject=0x4eceb9c*=0x46d2c0) returned 0x0 [0296.270] WbemDefPath:IUnknown:QueryInterface (in: This=0x46d2c0, riid=0x74e71b6c*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x4eceb50 | out: ppvObject=0x4eceb50*=0x0) returned 0x80004002 [0296.270] WbemDefPath:IUnknown:AddRef (This=0x46d2c0) returned 0x3 [0296.270] WbemDefPath:IUnknown:QueryInterface (in: This=0x46d2c0, riid=0x74e7182c*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x4ece4ac | out: ppvObject=0x4ece4ac*=0x0) returned 0x80004002 [0296.270] WbemDefPath:IUnknown:QueryInterface (in: This=0x46d2c0, riid=0x74e71764*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x4ece45c | out: ppvObject=0x4ece45c*=0x0) returned 0x80004002 [0296.270] WbemDefPath:IUnknown:QueryInterface (in: This=0x46d2c0, riid=0x74da1388*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x4ece468 | out: ppvObject=0x4ece468*=0x4936e8) returned 0x0 [0296.270] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x4936e8, riid=0x74d82a54*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x4ece470 | out: pCid=0x4ece470*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0296.270] WbemDefPath:IUnknown:Release (This=0x4936e8) returned 0x3 [0296.270] CoGetContextToken (in: pToken=0x4ece4c8 | out: pToken=0x4ece4c8) returned 0x0 [0296.270] CoGetContextToken (in: pToken=0x4ece8dc | out: pToken=0x4ece8dc) returned 0x0 [0296.270] WbemDefPath:IUnknown:QueryInterface (in: This=0x46d2c0, riid=0x74e71aa8*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x4ece95c | out: ppvObject=0x4ece95c*=0x0) returned 0x80004002 [0296.270] WbemDefPath:IUnknown:Release (This=0x46d2c0) returned 0x2 [0296.271] WbemDefPath:IUnknown:Release (This=0x46d2c0) returned 0x1 [0296.271] SetEvent (hEvent=0x32c) returned 1 Thread: id = 183 os_tid = 0x168 Thread: id = 184 os_tid = 0x4c0 Thread: id = 185 os_tid = 0x460 Thread: id = 186 os_tid = 0x598 [0294.712] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0294.713] IIDFromString (in: lpsz="{4590F811-1D3A-11D0-891F-00AA004B2E24}", lpiid=0x573efe4 | out: lpiid=0x573efe4) returned 0x0 [0294.714] CoGetClassObject (in: rclsid=0x48533c*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x74ed6bd4*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x573ed00 | out: ppv=0x573ed00*=0x492af0) returned 0x0 [0294.729] WbemLocator:IUnknown:QueryInterface (in: This=0x492af0, riid=0x74e9dd3c*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x573ef18 | out: ppvObject=0x573ef18*=0x0) returned 0x80004002 [0294.729] WbemLocator:IClassFactory:CreateInstance (in: This=0x492af0, pUnkOuter=0x0, riid=0x74d82a54*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x573ef24 | out: ppvObject=0x573ef24*=0x4935a8) returned 0x0 [0294.729] WbemLocator:IUnknown:Release (This=0x492af0) returned 0x0 [0294.729] WbemLocator:IUnknown:QueryInterface (in: This=0x4935a8, riid=0x74d82a54*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x573eb44 | out: ppvObject=0x573eb44*=0x4935a8) returned 0x0 [0294.729] WbemLocator:IUnknown:QueryInterface (in: This=0x4935a8, riid=0x74e71b6c*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x573eaf8 | out: ppvObject=0x573eaf8*=0x0) returned 0x80004002 [0294.729] WbemLocator:IUnknown:AddRef (This=0x4935a8) returned 0x3 [0294.729] WbemLocator:IUnknown:QueryInterface (in: This=0x4935a8, riid=0x74e7182c*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x573e454 | out: ppvObject=0x573e454*=0x0) returned 0x80004002 [0294.729] WbemLocator:IUnknown:QueryInterface (in: This=0x4935a8, riid=0x74e71764*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x573e404 | out: ppvObject=0x573e404*=0x0) returned 0x80004002 [0294.729] WbemLocator:IUnknown:QueryInterface (in: This=0x4935a8, riid=0x74da1388*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x573e410 | out: ppvObject=0x573e410*=0x0) returned 0x80004002 [0294.729] CoGetContextToken (in: pToken=0x573e470 | out: pToken=0x573e470) returned 0x0 [0294.730] CoGetObjectContext (in: riid=0x74d82a54*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x492af4 | out: ppv=0x492af4*=0x442ef0) returned 0x0 [0294.731] CoGetContextToken (in: pToken=0x573e884 | out: pToken=0x573e884) returned 0x0 [0294.731] WbemLocator:IUnknown:QueryInterface (in: This=0x4935a8, riid=0x74e71aa8*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x573e904 | out: ppvObject=0x573e904*=0x0) returned 0x80004002 [0294.731] WbemLocator:IUnknown:Release (This=0x4935a8) returned 0x2 [0294.731] WbemLocator:IUnknown:Release (This=0x4935a8) returned 0x1 [0294.731] CoGetContextToken (in: pToken=0x573eefc | out: pToken=0x573eefc) returned 0x0 [0294.731] CoGetContextToken (in: pToken=0x573ee5c | out: pToken=0x573ee5c) returned 0x0 [0294.731] WbemLocator:IUnknown:QueryInterface (in: This=0x4935a8, riid=0x573ef2c*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x573ef28 | out: ppvObject=0x573ef28*=0x4935a8) returned 0x0 [0294.732] WbemLocator:IUnknown:AddRef (This=0x4935a8) returned 0x3 [0294.732] WbemLocator:IUnknown:Release (This=0x4935a8) returned 0x2 [0294.750] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x46d170, puCount=0x573f0bc | out: puCount=0x573f0bc*=0x2) returned 0x0 [0294.750] WbemDefPath:IWbemPath:GetText (in: This=0x46d170, lFlags=8, puBuffLength=0x573f0b8*=0x0, pszText=0x0 | out: puBuffLength=0x573f0b8*=0xf, pszText=0x0) returned 0x0 [0294.750] WbemDefPath:IWbemPath:GetText (in: This=0x46d170, lFlags=8, puBuffLength=0x573f0b8*=0xf, pszText="00000000000000" | out: puBuffLength=0x573f0b8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0294.756] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\", nBufferLength=0x105, lpBuffer=0x573e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\", lpFilePart=0x0) returned 0x2e [0294.758] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\\\wminet_utils.dll", cchWideChar=63, lpMultiByteStr=0x573e808, cbMultiByte=65, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\\\wminet_utils.dll", lpUsedDefaultChar=0x0) returned 63 [0294.758] LoadLibraryA (lpLibFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\\\wminet_utils.dll") returned 0x70d90000 [0294.777] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ResetSecurity", cchWideChar=13, lpMultiByteStr=0x573e83c, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ResetSecuritymôp \x12§\x08DþÖt\x18ës\x05\x01", lpUsedDefaultChar=0x0) returned 13 [0294.777] GetProcAddress (hModule=0x70d90000, lpProcName="ResetSecurity") returned 0x70d97dd0 [0294.786] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SetSecurity", cchWideChar=11, lpMultiByteStr=0x573e83c, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SetSecurity", lpUsedDefaultChar=0x0) returned 11 [0294.786] GetProcAddress (hModule=0x70d90000, lpProcName="SetSecurity") returned 0x70d97e20 [0294.793] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BlessIWbemServices", cchWideChar=18, lpMultiByteStr=0x573e838, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BlessIWbemServicesôp \x12§\x08DþÖt\x18ës\x05", lpUsedDefaultChar=0x0) returned 18 [0294.793] GetProcAddress (hModule=0x70d90000, lpProcName="BlessIWbemServices") returned 0x70d96e70 [0294.810] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BlessIWbemServicesObject", cchWideChar=24, lpMultiByteStr=0x573e830, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BlessIWbemServicesObject»môp \x12§\x08DþÖt\x18ës\x05", lpUsedDefaultChar=0x0) returned 24 [0294.811] GetProcAddress (hModule=0x70d90000, lpProcName="BlessIWbemServicesObject") returned 0x70d96ed0 [0294.829] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetPropertyHandle", cchWideChar=17, lpMultiByteStr=0x573e838, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetPropertyHandlemôp \x12§\x08DþÖt\x18ës\x05", lpUsedDefaultChar=0x0) returned 17 [0294.830] GetProcAddress (hModule=0x70d90000, lpProcName="GetPropertyHandle") returned 0x70d97820 [0294.838] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="WritePropertyValue", cchWideChar=18, lpMultiByteStr=0x573e838, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="WritePropertyValueôp \x12§\x08DþÖt\x18ës\x05", lpUsedDefaultChar=0x0) returned 18 [0294.839] GetProcAddress (hModule=0x70d90000, lpProcName="WritePropertyValue") returned 0x70d97fa0 [0294.846] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Clone", cchWideChar=5, lpMultiByteStr=0x573e844, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Clonemôp \x12§\x08DþÖt\x18ës\x05", lpUsedDefaultChar=0x0) returned 5 [0294.847] GetProcAddress (hModule=0x70d90000, lpProcName="Clone") returned 0x70d96f30 [0294.854] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VerifyClientKey", cchWideChar=15, lpMultiByteStr=0x573e838, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VerifyClientKey", lpUsedDefaultChar=0x0) returned 15 [0294.854] GetProcAddress (hModule=0x70d90000, lpProcName="VerifyClientKey") returned 0x70d97f20 [0294.858] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetQualifierSet", cchWideChar=15, lpMultiByteStr=0x573e838, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetQualifierSet", lpUsedDefaultChar=0x0) returned 15 [0294.859] GetProcAddress (hModule=0x70d90000, lpProcName="GetQualifierSet") returned 0x70d978e0 [0294.860] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Get", cchWideChar=3, lpMultiByteStr=0x573e844, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Get", lpUsedDefaultChar=0x0) returned 3 [0294.860] GetProcAddress (hModule=0x70d90000, lpProcName="Get") returned 0x70d975c0 [0294.872] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Put", cchWideChar=3, lpMultiByteStr=0x573e844, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Put", lpUsedDefaultChar=0x0) returned 3 [0294.872] GetProcAddress (hModule=0x70d90000, lpProcName="Put") returned 0x70d97a00 [0294.882] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Delete", cchWideChar=6, lpMultiByteStr=0x573e844, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Deleteôp \x12§\x08DþÖt\x18ës\x05", lpUsedDefaultChar=0x0) returned 6 [0294.882] GetProcAddress (hModule=0x70d90000, lpProcName="Delete") returned 0x70d97300 [0294.896] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetNames", cchWideChar=8, lpMultiByteStr=0x573e840, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetNames»môp \x12§\x08DþÖt\x18ës\x05", lpUsedDefaultChar=0x0) returned 8 [0294.896] GetProcAddress (hModule=0x70d90000, lpProcName="GetNames") returned 0x70d977c0 [0294.912] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BeginEnumeration", cchWideChar=16, lpMultiByteStr=0x573e838, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BeginEnumeration»môp \x12§\x08DþÖt\x18ës\x05", lpUsedDefaultChar=0x0) returned 16 [0294.912] GetProcAddress (hModule=0x70d90000, lpProcName="BeginEnumeration") returned 0x70d96e30 [0294.918] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Next", cchWideChar=4, lpMultiByteStr=0x573e844, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Next»môp \x12§\x08DþÖt\x18ës\x05", lpUsedDefaultChar=0x0) returned 4 [0294.918] GetProcAddress (hModule=0x70d90000, lpProcName="Next") returned 0x70d979a0 [0294.929] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="EndEnumeration", cchWideChar=14, lpMultiByteStr=0x573e83c, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="EndEnumerationôp \x12§\x08DþÖt\x18ës\x05", lpUsedDefaultChar=0x0) returned 14 [0294.930] GetProcAddress (hModule=0x70d90000, lpProcName="EndEnumeration") returned 0x70d973c0 [0294.935] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetPropertyQualifierSet", cchWideChar=23, lpMultiByteStr=0x573e830, cbMultiByte=25, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetPropertyQualifierSet", lpUsedDefaultChar=0x0) returned 23 [0294.936] GetProcAddress (hModule=0x70d90000, lpProcName="GetPropertyQualifierSet") returned 0x70d978b0 [0294.944] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Clone", cchWideChar=5, lpMultiByteStr=0x573e844, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Clonemôp \x12§\x08DþÖt\x18ës\x05", lpUsedDefaultChar=0x0) returned 5 [0294.944] GetProcAddress (hModule=0x70d90000, lpProcName="Clone") returned 0x70d96f30 [0294.944] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetObjectText", cchWideChar=13, lpMultiByteStr=0x573e83c, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetObjectTextmôp \x12§\x08DþÖt\x18ës\x05", lpUsedDefaultChar=0x0) returned 13 [0294.944] GetProcAddress (hModule=0x70d90000, lpProcName="GetObjectText") returned 0x70d977f0 [0294.953] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SpawnDerivedClass", cchWideChar=17, lpMultiByteStr=0x573e838, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SpawnDerivedClassmôp \x12§\x08DþÖt\x18ës\x05", lpUsedDefaultChar=0x0) returned 17 [0294.953] GetProcAddress (hModule=0x70d90000, lpProcName="SpawnDerivedClass") returned 0x70d97e80 [0294.967] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SpawnInstance", cchWideChar=13, lpMultiByteStr=0x573e83c, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SpawnInstancemôp \x12§\x08DþÖt\x18ës\x05", lpUsedDefaultChar=0x0) returned 13 [0294.967] GetProcAddress (hModule=0x70d90000, lpProcName="SpawnInstance") returned 0x70d97eb0 [0294.969] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CompareTo", cchWideChar=9, lpMultiByteStr=0x573e840, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CompareTomôp \x12§\x08DþÖt\x18ës\x05", lpUsedDefaultChar=0x0) returned 9 [0294.969] GetProcAddress (hModule=0x70d90000, lpProcName="CompareTo") returned 0x70d97020 [0294.977] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetPropertyOrigin", cchWideChar=17, lpMultiByteStr=0x573e838, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetPropertyOriginmôp \x12§\x08DþÖt\x18ës\x05", lpUsedDefaultChar=0x0) returned 17 [0294.977] GetProcAddress (hModule=0x70d90000, lpProcName="GetPropertyOrigin") returned 0x70d97880 [0294.986] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="InheritsFrom", cchWideChar=12, lpMultiByteStr=0x573e83c, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InheritsFrom»môp \x12§\x08DþÖt\x18ës\x05", lpUsedDefaultChar=0x0) returned 12 [0294.986] GetProcAddress (hModule=0x70d90000, lpProcName="InheritsFrom") returned 0x70d97900 [0294.987] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetMethod", cchWideChar=9, lpMultiByteStr=0x573e840, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetMethodmôp \x12§\x08DþÖt\x18ës\x05", lpUsedDefaultChar=0x0) returned 9 [0294.988] GetProcAddress (hModule=0x70d90000, lpProcName="GetMethod") returned 0x70d97730 [0294.996] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PutMethod", cchWideChar=9, lpMultiByteStr=0x573e840, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PutMethodmôp \x12§\x08DþÖt\x18ës\x05", lpUsedDefaultChar=0x0) returned 9 [0294.996] GetProcAddress (hModule=0x70d90000, lpProcName="PutMethod") returned 0x70d97bf0 [0295.005] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DeleteMethod", cchWideChar=12, lpMultiByteStr=0x573e83c, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DeleteMethod»môp \x12§\x08DþÖt\x18ës\x05", lpUsedDefaultChar=0x0) returned 12 [0295.005] GetProcAddress (hModule=0x70d90000, lpProcName="DeleteMethod") returned 0x70d97320 [0295.006] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BeginMethodEnumeration", cchWideChar=22, lpMultiByteStr=0x573e834, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BeginMethodEnumerationôp \x12§\x08DþÖt\x18ës\x05", lpUsedDefaultChar=0x0) returned 22 [0295.007] GetProcAddress (hModule=0x70d90000, lpProcName="BeginMethodEnumeration") returned 0x70d96e50 [0295.008] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="NextMethod", cchWideChar=10, lpMultiByteStr=0x573e840, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NextMethodôp \x12§\x08DþÖt\x18ës\x05", lpUsedDefaultChar=0x0) returned 10 [0295.008] GetProcAddress (hModule=0x70d90000, lpProcName="NextMethod") returned 0x70d979d0 [0295.018] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="EndMethodEnumeration", cchWideChar=20, lpMultiByteStr=0x573e834, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="EndMethodEnumeration»môp \x12§\x08DþÖt\x18ës\x05", lpUsedDefaultChar=0x0) returned 20 [0295.018] GetProcAddress (hModule=0x70d90000, lpProcName="EndMethodEnumeration") returned 0x70d973e0 [0295.019] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetMethodQualifierSet", cchWideChar=21, lpMultiByteStr=0x573e834, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetMethodQualifierSetmôp \x12§\x08DþÖt\x18ës\x05", lpUsedDefaultChar=0x0) returned 21 [0295.019] GetProcAddress (hModule=0x70d90000, lpProcName="GetMethodQualifierSet") returned 0x70d97790 [0295.021] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetMethodOrigin", cchWideChar=15, lpMultiByteStr=0x573e838, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetMethodOrigin", lpUsedDefaultChar=0x0) returned 15 [0295.021] GetProcAddress (hModule=0x70d90000, lpProcName="GetMethodOrigin") returned 0x70d97760 [0295.022] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_Get", cchWideChar=16, lpMultiByteStr=0x573e838, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_Get»môp \x12§\x08DþÖt\x18ës\x05", lpUsedDefaultChar=0x0) returned 16 [0295.023] GetProcAddress (hModule=0x70d90000, lpProcName="QualifierSet_Get") returned 0x70d97c80 [0295.035] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_Put", cchWideChar=16, lpMultiByteStr=0x573e838, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_Put»môp \x12§\x08DþÖt\x18ës\x05", lpUsedDefaultChar=0x0) returned 16 [0295.035] GetProcAddress (hModule=0x70d90000, lpProcName="QualifierSet_Put") returned 0x70d97d10 [0295.045] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_Delete", cchWideChar=19, lpMultiByteStr=0x573e834, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_Delete", lpUsedDefaultChar=0x0) returned 19 [0295.045] GetProcAddress (hModule=0x70d90000, lpProcName="QualifierSet_Delete") returned 0x70d97c40 [0295.047] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_GetNames", cchWideChar=21, lpMultiByteStr=0x573e834, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_GetNamesmôp \x12§\x08DþÖt\x18ës\x05", lpUsedDefaultChar=0x0) returned 21 [0295.047] GetProcAddress (hModule=0x70d90000, lpProcName="QualifierSet_GetNames") returned 0x70d97cb0 [0295.057] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_BeginEnumeration", cchWideChar=29, lpMultiByteStr=0x573e82c, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_BeginEnumerationmôp \x12§\x08DþÖt\x18ës\x05", lpUsedDefaultChar=0x0) returned 29 [0295.057] GetProcAddress (hModule=0x70d90000, lpProcName="QualifierSet_BeginEnumeration") returned 0x70d97c20 [0295.058] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_Next", cchWideChar=17, lpMultiByteStr=0x573e838, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_Nextmôp \x12§\x08DþÖt\x18ës\x05", lpUsedDefaultChar=0x0) returned 17 [0295.059] GetProcAddress (hModule=0x70d90000, lpProcName="QualifierSet_Next") returned 0x70d97ce0 [0295.070] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_EndEnumeration", cchWideChar=27, lpMultiByteStr=0x573e82c, cbMultiByte=29, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_EndEnumeration", lpUsedDefaultChar=0x0) returned 27 [0295.070] GetProcAddress (hModule=0x70d90000, lpProcName="QualifierSet_EndEnumeration") returned 0x70d97c60 [0295.072] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetCurrentApartmentType", cchWideChar=23, lpMultiByteStr=0x573e830, cbMultiByte=25, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetCurrentApartmentType", lpUsedDefaultChar=0x0) returned 23 [0295.072] GetProcAddress (hModule=0x70d90000, lpProcName="GetCurrentApartmentType") returned 0x70d978e0 [0295.078] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetDemultiplexedStub", cchWideChar=20, lpMultiByteStr=0x573e834, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetDemultiplexedStub»môp \x12§\x08DþÖt\x18ës\x05", lpUsedDefaultChar=0x0) returned 20 [0295.079] GetProcAddress (hModule=0x70d90000, lpProcName="GetDemultiplexedStub") returned 0x70d975f0 [0295.091] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CreateInstanceEnumWmi", cchWideChar=21, lpMultiByteStr=0x573e834, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CreateInstanceEnumWmimôp \x12§\x08DþÖt\x18ës\x05", lpUsedDefaultChar=0x0) returned 21 [0295.092] GetProcAddress (hModule=0x70d90000, lpProcName="CreateInstanceEnumWmi") returned 0x70d97230 [0295.113] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CreateClassEnumWmi", cchWideChar=18, lpMultiByteStr=0x573e838, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CreateClassEnumWmiôp \x12§\x08DþÖt\x18ës\x05", lpUsedDefaultChar=0x0) returned 18 [0295.113] GetProcAddress (hModule=0x70d90000, lpProcName="CreateClassEnumWmi") returned 0x70d97160 [0295.115] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ExecQueryWmi", cchWideChar=12, lpMultiByteStr=0x573e83c, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ExecQueryWmi»môp \x12§\x08DþÖt\x18ës\x05", lpUsedDefaultChar=0x0) returned 12 [0295.115] GetProcAddress (hModule=0x70d90000, lpProcName="ExecQueryWmi") returned 0x70d974e0 [0295.138] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ExecNotificationQueryWmi", cchWideChar=24, lpMultiByteStr=0x573e830, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ExecNotificationQueryWmi»môp \x12§\x08DþÖt\x18ës\x05", lpUsedDefaultChar=0x0) returned 24 [0295.138] GetProcAddress (hModule=0x70d90000, lpProcName="ExecNotificationQueryWmi") returned 0x70d97400 [0295.140] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PutInstanceWmi", cchWideChar=14, lpMultiByteStr=0x573e83c, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PutInstanceWmiôp \x12§\x08DþÖt\x18ës\x05", lpUsedDefaultChar=0x0) returned 14 [0295.140] GetProcAddress (hModule=0x70d90000, lpProcName="PutInstanceWmi") returned 0x70d97b10 [0295.159] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PutClassWmi", cchWideChar=11, lpMultiByteStr=0x573e83c, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PutClassWmi", lpUsedDefaultChar=0x0) returned 11 [0295.159] GetProcAddress (hModule=0x70d90000, lpProcName="PutClassWmi") returned 0x70d97a30 [0295.161] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CloneEnumWbemClassObject", cchWideChar=24, lpMultiByteStr=0x573e830, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CloneEnumWbemClassObject»môp \x12§\x08DþÖt\x18ës\x05", lpUsedDefaultChar=0x0) returned 24 [0295.161] GetProcAddress (hModule=0x70d90000, lpProcName="CloneEnumWbemClassObject") returned 0x70d96f50 [0295.177] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ConnectServerWmi", cchWideChar=16, lpMultiByteStr=0x573e838, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ConnectServerWmi»môp \x12§\x08DþÖt\x18ës\x05", lpUsedDefaultChar=0x0) returned 16 [0295.177] GetProcAddress (hModule=0x70d90000, lpProcName="ConnectServerWmi") returned 0x70d97050 [0295.196] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetErrorInfo", cchWideChar=12, lpMultiByteStr=0x573e83c, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetErrorInfo»môp \x12§\x08DþÖt\x18ës\x05", lpUsedDefaultChar=0x0) returned 12 [0295.196] GetProcAddress (hModule=0x70d90000, lpProcName="GetErrorInfo") returned 0x70d97650 [0295.199] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Initialize", cchWideChar=10, lpMultiByteStr=0x573e840, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Initializeôp \x12§\x08DþÖt\x18ës\x05", lpUsedDefaultChar=0x0) returned 10 [0295.199] GetProcAddress (hModule=0x70d90000, lpProcName="Initialize") returned 0x70d97920 [0295.210] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319", ulOptions=0x0, samDesired=0x20019, phkResult=0x573e7f0 | out: phkResult=0x573e7f0*=0x2e0) returned 0x0 [0295.210] RegQueryValueExW (in: hKey=0x2e0, lpValueName="WMIDisableCOMSecurity", lpReserved=0x0, lpType=0x573e80c, lpData=0x0, lpcbData=0x573e808*=0x0 | out: lpType=0x573e80c*=0x0, lpData=0x0, lpcbData=0x573e808*=0x0) returned 0x2 [0295.211] RegCloseKey (hKey=0x2e0) returned 0x0 [0295.211] CoCreateInstance (in: rclsid=0x70d93734*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x70d93794*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x573eeec | out: ppv=0x573eeec*=0x4935f8) returned 0x0 [0295.212] WbemLocator:IWbemLocator:ConnectServer (in: This=0x4935f8, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x573f000 | out: ppNamespace=0x573f000*=0x437dd8) returned 0x0 [0295.321] WbemLocator:IUnknown:QueryInterface (in: This=0x437dd8, riid=0x70d935b4*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x573ee10 | out: ppvObject=0x573ee10*=0x49cf1c) returned 0x0 [0295.321] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x49cf1c, pProxy=0x437dd8, pAuthnSvc=0x573ee60, pAuthzSvc=0x573ee5c, pServerPrincName=0x573ee54, pAuthnLevel=0x573ee58, pImpLevel=0x573ee48, pAuthInfo=0x573ee4c, pCapabilites=0x573ee50 | out: pAuthnSvc=0x573ee60*=0xa, pAuthzSvc=0x573ee5c*=0x0, pServerPrincName=0x573ee54, pAuthnLevel=0x573ee58*=0x6, pImpLevel=0x573ee48*=0x2, pAuthInfo=0x573ee4c, pCapabilites=0x573ee50*=0x1) returned 0x0 [0295.321] WbemLocator:IUnknown:Release (This=0x49cf1c) returned 0x1 [0295.321] WbemLocator:IUnknown:QueryInterface (in: This=0x437dd8, riid=0x70d935a4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x573ee04 | out: ppvObject=0x573ee04*=0x49cf3c) returned 0x0 [0295.321] WbemLocator:IUnknown:QueryInterface (in: This=0x437dd8, riid=0x70d935b4*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x573edf0 | out: ppvObject=0x573edf0*=0x49cf1c) returned 0x0 [0295.321] WbemLocator:IClientSecurity:SetBlanket (This=0x49cf1c, pProxy=0x437dd8, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0295.321] WbemLocator:IUnknown:Release (This=0x49cf1c) returned 0x2 [0295.321] WbemLocator:IUnknown:Release (This=0x49cf3c) returned 0x1 [0295.321] CoTaskMemFree (pv=0x49c050) [0295.322] WbemLocator:IUnknown:AddRef (This=0x437dd8) returned 0x2 [0295.322] WbemLocator:IUnknown:Release (This=0x4935f8) returned 0x0 [0295.322] CoGetContextToken (in: pToken=0x573e344 | out: pToken=0x573e344) returned 0x0 [0295.323] CoGetContextToken (in: pToken=0x573e754 | out: pToken=0x573e754) returned 0x0 [0295.323] WbemLocator:IUnknown:QueryInterface (in: This=0x437dd8, riid=0x74e71aa8*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x573e6f0 | out: ppvObject=0x573e6f0*=0x49cf24) returned 0x0 [0295.324] WbemLocator:IRpcOptions:Query (in: This=0x49cf24, pPrx=0x49cc00, dwProperty=2, pdwValue=0x573e7e4 | out: pdwValue=0x573e7e4) returned 0x80004002 [0295.324] WbemLocator:IUnknown:Release (This=0x49cf24) returned 0x2 [0295.324] CoGetContextToken (in: pToken=0x573ed24 | out: pToken=0x573ed24) returned 0x0 [0295.324] CoGetContextToken (in: pToken=0x573ec84 | out: pToken=0x573ec84) returned 0x0 [0295.324] WbemLocator:IUnknown:QueryInterface (in: This=0x437dd8, riid=0x573ed54*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x573ec20 | out: ppvObject=0x573ec20*=0x437dd8) returned 0x0 [0295.325] WbemLocator:IUnknown:Release (This=0x437dd8) returned 0x2 [0295.333] SysStringLen (param_1=0x0) returned 0x0 [0295.334] CoUninitialize () Thread: id = 235 os_tid = 0x594 [0295.346] CoGetContextToken (in: pToken=0x563f188 | out: pToken=0x563f188) returned 0x0 [0295.346] CoGetContextToken (in: pToken=0x563f174 | out: pToken=0x563f174) returned 0x0 [0295.346] CoGetMarshalSizeMax (in: pulSize=0x563f130, riid=0x74d82a54*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x49cc00, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0 | out: pulSize=0x563f130) returned 0x0 [0295.348] CoMarshalInterface (pStm=0x46ccb0, riid=0x74d82a54*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x49cc00, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0) returned 0x0 Thread: id = 236 os_tid = 0x590 [0295.353] WbemLocator:IUnknown:QueryInterface (in: This=0x437dd8, riid=0x485bf0*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x574f070 | out: ppvObject=0x574f070*=0x437dd8) returned 0x0 [0295.353] WbemLocator:IUnknown:QueryInterface (in: This=0x437dd8, riid=0x70cd62ec*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x574f00c | out: ppvObject=0x574f00c*=0x437dd8) returned 0x0 [0295.353] WbemLocator:IUnknown:QueryInterface (in: This=0x437dd8, riid=0x70cd62ec*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x574efc4 | out: ppvObject=0x574efc4*=0x437dd8) returned 0x0 Process: id = "13" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x1a487000" os_pid = "0x364" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "rpc_server" parent_id = "12" os_parent_pid = "0x1d0" cmd_line = "C:\\Windows\\system32\\svchost.exe -k netsvcs" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xa], "NT SERVICE\\LanmanServer" [0xa], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xa], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xa], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xa], "NT SERVICE\\wuauserv" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000d56c" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 187 os_tid = 0x4d8 Thread: id = 188 os_tid = 0x4d0 Thread: id = 189 os_tid = 0x4bc Thread: id = 190 os_tid = 0x49c Thread: id = 191 os_tid = 0x490 Thread: id = 192 os_tid = 0x404 Thread: id = 193 os_tid = 0x454 Thread: id = 194 os_tid = 0x470 Thread: id = 195 os_tid = 0x45c Thread: id = 196 os_tid = 0x410 Thread: id = 197 os_tid = 0x7fc Thread: id = 198 os_tid = 0x7f8 Thread: id = 199 os_tid = 0x7d4 Thread: id = 200 os_tid = 0x7c8 Thread: id = 201 os_tid = 0x7c4 Thread: id = 202 os_tid = 0x7b4 Thread: id = 203 os_tid = 0x748 Thread: id = 204 os_tid = 0x740 Thread: id = 205 os_tid = 0x72c Thread: id = 206 os_tid = 0x720 Thread: id = 207 os_tid = 0x718 Thread: id = 208 os_tid = 0x714 Thread: id = 209 os_tid = 0x70c Thread: id = 210 os_tid = 0x704 Thread: id = 211 os_tid = 0x700 Thread: id = 212 os_tid = 0x6fc Thread: id = 213 os_tid = 0x6f4 Thread: id = 214 os_tid = 0x6f0 Thread: id = 215 os_tid = 0x6cc Thread: id = 216 os_tid = 0x530 Thread: id = 217 os_tid = 0x440 Thread: id = 218 os_tid = 0x444 Thread: id = 219 os_tid = 0x4cc Thread: id = 220 os_tid = 0x498 Thread: id = 221 os_tid = 0x480 Thread: id = 222 os_tid = 0x47c Thread: id = 223 os_tid = 0x478 Thread: id = 224 os_tid = 0x16c Thread: id = 225 os_tid = 0x180 Thread: id = 226 os_tid = 0x3f0 Thread: id = 227 os_tid = 0x3e8 Thread: id = 228 os_tid = 0x3dc Thread: id = 229 os_tid = 0x390 Thread: id = 230 os_tid = 0x384 Thread: id = 231 os_tid = 0x380 Thread: id = 232 os_tid = 0x37c Thread: id = 233 os_tid = 0x370 Thread: id = 234 os_tid = 0x368 Process: id = "14" image_name = "wmiprvse.exe" filename = "c:\\windows\\system32\\wbem\\wmiprvse.exe" page_root = "0x5c4f9000" os_pid = "0x5b0" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "rpc_server" parent_id = "12" os_parent_pid = "0x248" cmd_line = "C:\\Windows\\system32\\wbem\\wmiprvse.exe -secured -Embedding" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Network Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "WMI (Network Service)" [0xf], "NT AUTHORITY\\Logon Session 00000000:00027120" [0xc000000f] Thread: id = 237 os_tid = 0x350 Thread: id = 238 os_tid = 0x5c0 Thread: id = 239 os_tid = 0x5f0 Thread: id = 240 os_tid = 0x354 Thread: id = 241 os_tid = 0x34c Thread: id = 242 os_tid = 0x5c8 Thread: id = 243 os_tid = 0x61c Process: id = "15" image_name = "cmd.exe" filename = "c:\\windows\\syswow64\\cmd.exe" page_root = "0x5d176000" os_pid = "0x588" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "12" os_parent_pid = "0x4b4" cmd_line = "\"cmd.exe\" /c vssadmin.exe delete shadows /all /quiet" cur_dir = "C:\\Windows\\system32\\" os_username = "Q9IATRKPRH\\kEecfMwgj" bitness = "32" os_groups = "Q9IATRKPRH\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e8d9" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 244 os_tid = 0x628 [0296.711] GetProcAddress (hModule=0x75770000, lpProcName="SetConsoleInputExeNameW") returned 0x7579a79d [0296.713] GetProcessHeap () returned 0x210000 [0296.713] RtlAllocateHeap (HeapHandle=0x210000, Flags=0x8, Size=0x400a) returned 0x225a70 [0296.713] GetProcessHeap () returned 0x210000 [0296.713] HeapFree (in: hHeap=0x210000, dwFlags=0x0, lpMem=0x225a70 | out: hHeap=0x210000) returned 1 [0296.714] _wcsicmp (_String1="vssadmin.exe", _String2=")") returned 77 [0296.714] _wcsicmp (_String1="FOR", _String2="vssadmin.exe") returned -16 [0296.714] _wcsicmp (_String1="FOR/?", _String2="vssadmin.exe") returned -16 [0296.714] _wcsicmp (_String1="IF", _String2="vssadmin.exe") returned -13 [0296.715] _wcsicmp (_String1="IF/?", _String2="vssadmin.exe") returned -13 [0296.715] _wcsicmp (_String1="REM", _String2="vssadmin.exe") returned -4 [0296.715] _wcsicmp (_String1="REM/?", _String2="vssadmin.exe") returned -4 [0296.715] GetProcessHeap () returned 0x210000 [0296.715] RtlAllocateHeap (HeapHandle=0x210000, Flags=0x8, Size=0x58) returned 0x223180 [0296.715] GetProcessHeap () returned 0x210000 [0296.715] RtlAllocateHeap (HeapHandle=0x210000, Flags=0x8, Size=0x22) returned 0x221fd0 [0296.716] GetProcessHeap () returned 0x210000 [0296.716] RtlAllocateHeap (HeapHandle=0x210000, Flags=0x8, Size=0x40) returned 0x2231e0 [0296.717] GetConsoleTitleW (in: lpConsoleTitle=0x43f2d8, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0296.718] GetFileAttributesW (lpFileName="vssadmin.exe" (normalized: "c:\\windows\\syswow64\\vssadmin.exe")) returned 0x20 [0296.719] _wcsicmp (_String1="vssadmin.exe", _String2="DIR") returned 18 [0296.719] _wcsicmp (_String1="vssadmin.exe", _String2="ERASE") returned 17 [0296.719] _wcsicmp (_String1="vssadmin.exe", _String2="DEL") returned 18 [0296.719] _wcsicmp (_String1="vssadmin.exe", _String2="TYPE") returned 2 [0296.719] _wcsicmp (_String1="vssadmin.exe", _String2="COPY") returned 19 [0296.719] _wcsicmp (_String1="vssadmin.exe", _String2="CD") returned 19 [0296.719] _wcsicmp (_String1="vssadmin.exe", _String2="CHDIR") returned 19 [0296.719] _wcsicmp (_String1="vssadmin.exe", _String2="RENAME") returned 4 [0296.719] _wcsicmp (_String1="vssadmin.exe", _String2="REN") returned 4 [0296.720] _wcsicmp (_String1="vssadmin.exe", _String2="ECHO") returned 17 [0296.720] _wcsicmp (_String1="vssadmin.exe", _String2="SET") returned 3 [0296.720] _wcsicmp (_String1="vssadmin.exe", _String2="PAUSE") returned 6 [0296.720] _wcsicmp (_String1="vssadmin.exe", _String2="DATE") returned 18 [0296.720] _wcsicmp (_String1="vssadmin.exe", _String2="TIME") returned 2 [0296.720] _wcsicmp (_String1="vssadmin.exe", _String2="PROMPT") returned 6 [0296.720] _wcsicmp (_String1="vssadmin.exe", _String2="MD") returned 9 [0296.720] _wcsicmp (_String1="vssadmin.exe", _String2="MKDIR") returned 9 [0296.720] _wcsicmp (_String1="vssadmin.exe", _String2="RD") returned 4 [0296.720] _wcsicmp (_String1="vssadmin.exe", _String2="RMDIR") returned 4 [0296.720] _wcsicmp (_String1="vssadmin.exe", _String2="PATH") returned 6 [0296.720] _wcsicmp (_String1="vssadmin.exe", _String2="GOTO") returned 15 [0296.720] _wcsicmp (_String1="vssadmin.exe", _String2="SHIFT") returned 3 [0296.720] _wcsicmp (_String1="vssadmin.exe", _String2="CLS") returned 19 [0296.720] _wcsicmp (_String1="vssadmin.exe", _String2="CALL") returned 19 [0296.720] _wcsicmp (_String1="vssadmin.exe", _String2="VERIFY") returned 14 [0296.720] _wcsicmp (_String1="vssadmin.exe", _String2="VER") returned 14 [0296.720] _wcsicmp (_String1="vssadmin.exe", _String2="VOL") returned 4 [0296.720] _wcsicmp (_String1="vssadmin.exe", _String2="EXIT") returned 17 [0296.720] _wcsicmp (_String1="vssadmin.exe", _String2="SETLOCAL") returned 3 [0296.720] _wcsicmp (_String1="vssadmin.exe", _String2="ENDLOCAL") returned 17 [0296.720] _wcsicmp (_String1="vssadmin.exe", _String2="TITLE") returned 2 [0296.721] _wcsicmp (_String1="vssadmin.exe", _String2="START") returned 3 [0296.721] _wcsicmp (_String1="vssadmin.exe", _String2="DPATH") returned 18 [0296.721] _wcsicmp (_String1="vssadmin.exe", _String2="KEYS") returned 11 [0296.721] _wcsicmp (_String1="vssadmin.exe", _String2="MOVE") returned 9 [0296.721] _wcsicmp (_String1="vssadmin.exe", _String2="PUSHD") returned 6 [0296.721] _wcsicmp (_String1="vssadmin.exe", _String2="POPD") returned 6 [0296.721] _wcsicmp (_String1="vssadmin.exe", _String2="ASSOC") returned 21 [0296.721] _wcsicmp (_String1="vssadmin.exe", _String2="FTYPE") returned 16 [0296.721] _wcsicmp (_String1="vssadmin.exe", _String2="BREAK") returned 20 [0296.721] _wcsicmp (_String1="vssadmin.exe", _String2="COLOR") returned 19 [0296.721] _wcsicmp (_String1="vssadmin.exe", _String2="MKLINK") returned 9 [0296.721] _wcsicmp (_String1="vssadmin.exe", _String2="DIR") returned 18 [0296.721] _wcsicmp (_String1="vssadmin.exe", _String2="ERASE") returned 17 [0296.721] _wcsicmp (_String1="vssadmin.exe", _String2="DEL") returned 18 [0296.721] _wcsicmp (_String1="vssadmin.exe", _String2="TYPE") returned 2 [0296.721] _wcsicmp (_String1="vssadmin.exe", _String2="COPY") returned 19 [0296.721] _wcsicmp (_String1="vssadmin.exe", _String2="CD") returned 19 [0296.721] _wcsicmp (_String1="vssadmin.exe", _String2="CHDIR") returned 19 [0296.721] _wcsicmp (_String1="vssadmin.exe", _String2="RENAME") returned 4 [0296.721] _wcsicmp (_String1="vssadmin.exe", _String2="REN") returned 4 [0296.721] _wcsicmp (_String1="vssadmin.exe", _String2="ECHO") returned 17 [0296.721] _wcsicmp (_String1="vssadmin.exe", _String2="SET") returned 3 [0296.721] _wcsicmp (_String1="vssadmin.exe", _String2="PAUSE") returned 6 [0296.722] _wcsicmp (_String1="vssadmin.exe", _String2="DATE") returned 18 [0296.722] _wcsicmp (_String1="vssadmin.exe", _String2="TIME") returned 2 [0296.722] _wcsicmp (_String1="vssadmin.exe", _String2="PROMPT") returned 6 [0296.722] _wcsicmp (_String1="vssadmin.exe", _String2="MD") returned 9 [0296.722] _wcsicmp (_String1="vssadmin.exe", _String2="MKDIR") returned 9 [0296.722] _wcsicmp (_String1="vssadmin.exe", _String2="RD") returned 4 [0296.722] _wcsicmp (_String1="vssadmin.exe", _String2="RMDIR") returned 4 [0296.722] _wcsicmp (_String1="vssadmin.exe", _String2="PATH") returned 6 [0296.722] _wcsicmp (_String1="vssadmin.exe", _String2="GOTO") returned 15 [0296.722] _wcsicmp (_String1="vssadmin.exe", _String2="SHIFT") returned 3 [0296.722] _wcsicmp (_String1="vssadmin.exe", _String2="CLS") returned 19 [0296.722] _wcsicmp (_String1="vssadmin.exe", _String2="CALL") returned 19 [0296.722] _wcsicmp (_String1="vssadmin.exe", _String2="VERIFY") returned 14 [0296.722] _wcsicmp (_String1="vssadmin.exe", _String2="VER") returned 14 [0296.722] _wcsicmp (_String1="vssadmin.exe", _String2="VOL") returned 4 [0296.722] _wcsicmp (_String1="vssadmin.exe", _String2="EXIT") returned 17 [0296.722] _wcsicmp (_String1="vssadmin.exe", _String2="SETLOCAL") returned 3 [0296.722] _wcsicmp (_String1="vssadmin.exe", _String2="ENDLOCAL") returned 17 [0296.722] _wcsicmp (_String1="vssadmin.exe", _String2="TITLE") returned 2 [0296.722] _wcsicmp (_String1="vssadmin.exe", _String2="START") returned 3 [0296.722] _wcsicmp (_String1="vssadmin.exe", _String2="DPATH") returned 18 [0296.722] _wcsicmp (_String1="vssadmin.exe", _String2="KEYS") returned 11 [0296.722] _wcsicmp (_String1="vssadmin.exe", _String2="MOVE") returned 9 [0296.722] _wcsicmp (_String1="vssadmin.exe", _String2="PUSHD") returned 6 [0296.722] _wcsicmp (_String1="vssadmin.exe", _String2="POPD") returned 6 [0296.722] _wcsicmp (_String1="vssadmin.exe", _String2="ASSOC") returned 21 [0296.722] _wcsicmp (_String1="vssadmin.exe", _String2="FTYPE") returned 16 [0296.723] _wcsicmp (_String1="vssadmin.exe", _String2="BREAK") returned 20 [0296.723] _wcsicmp (_String1="vssadmin.exe", _String2="COLOR") returned 19 [0296.723] _wcsicmp (_String1="vssadmin.exe", _String2="MKLINK") returned 9 [0296.723] _wcsicmp (_String1="vssadmin.exe", _String2="FOR") returned 16 [0296.723] _wcsicmp (_String1="vssadmin.exe", _String2="IF") returned 13 [0296.723] _wcsicmp (_String1="vssadmin.exe", _String2="REM") returned 4 [0296.723] GetProcessHeap () returned 0x210000 [0296.723] RtlAllocateHeap (HeapHandle=0x210000, Flags=0x8, Size=0x210) returned 0x223228 [0296.724] GetProcessHeap () returned 0x210000 [0296.724] RtlAllocateHeap (HeapHandle=0x210000, Flags=0x8, Size=0x5a) returned 0x223440 [0296.724] _wcsnicmp (_String1="vssa", _String2="cmd ", _MaxCount=0x4) returned 19 [0296.724] GetProcessHeap () returned 0x210000 [0296.724] RtlAllocateHeap (HeapHandle=0x210000, Flags=0x8, Size=0x418) returned 0x2107f0 [0296.724] SetErrorMode (uMode=0x0) returned 0x0 [0296.724] SetErrorMode (uMode=0x1) returned 0x0 [0296.724] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x2107f8, lpFilePart=0x43edf8 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x43edf8*="system32") returned 0x13 [0296.724] SetErrorMode (uMode=0x0) returned 0x1 [0296.724] GetProcessHeap () returned 0x210000 [0296.725] RtlReAllocateHeap (Heap=0x210000, Flags=0x0, Ptr=0x2107f0, Size=0x4a) returned 0x2107f0 [0296.725] GetProcessHeap () returned 0x210000 [0296.725] RtlSizeHeap (HeapHandle=0x210000, Flags=0x0, MemoryPointer=0x2107f0) returned 0x4a [0296.725] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4abb0640, nSize=0x2000 | out: lpBuffer="") returned 0x8f [0296.725] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0296.725] GetProcessHeap () returned 0x210000 [0296.725] RtlAllocateHeap (HeapHandle=0x210000, Flags=0x8, Size=0x154) returned 0x2234a8 [0296.725] GetProcessHeap () returned 0x210000 [0296.725] RtlAllocateHeap (HeapHandle=0x210000, Flags=0x8, Size=0x2a0) returned 0x210848 [0296.732] GetProcessHeap () returned 0x210000 [0296.732] RtlReAllocateHeap (Heap=0x210000, Flags=0x0, Ptr=0x210848, Size=0x156) returned 0x210848 [0296.732] GetProcessHeap () returned 0x210000 [0296.732] RtlSizeHeap (HeapHandle=0x210000, Flags=0x0, MemoryPointer=0x210848) returned 0x156 [0296.732] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4abb0640, nSize=0x2000 | out: lpBuffer="") returned 0x35 [0296.732] GetProcessHeap () returned 0x210000 [0296.733] RtlAllocateHeap (HeapHandle=0x210000, Flags=0x8, Size=0xe0) returned 0x223608 [0296.733] GetProcessHeap () returned 0x210000 [0296.733] RtlReAllocateHeap (Heap=0x210000, Flags=0x0, Ptr=0x223608, Size=0x76) returned 0x223608 [0296.733] GetProcessHeap () returned 0x210000 [0296.733] RtlSizeHeap (HeapHandle=0x210000, Flags=0x0, MemoryPointer=0x223608) returned 0x76 [0296.735] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0296.735] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\vssadmin.exe", fInfoLevelId=0x1, lpFindFileData=0x43eb94, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x43eb94) returned 0x223688 [0296.736] GetProcessHeap () returned 0x210000 [0296.736] RtlAllocateHeap (HeapHandle=0x210000, Flags=0x0, Size=0x14) returned 0x222000 [0296.736] FindClose (in: hFindFile=0x223688 | out: hFindFile=0x223688) returned 1 [0296.736] _wcsicmp (_String1=".exe", _String2=".CMD") returned 2 [0296.736] _wcsicmp (_String1=".exe", _String2=".BAT") returned 3 [0296.736] GetConsoleTitleW (in: lpConsoleTitle=0x43f06c, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0296.737] InitializeProcThreadAttributeList (in: lpAttributeList=0x43eef4, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x43efbc | out: lpAttributeList=0x43eef4, lpSize=0x43efbc) returned 1 [0296.737] UpdateProcThreadAttribute (in: lpAttributeList=0x43eef4, dwFlags=0x0, Attribute=0x60001, lpValue=0x43efb4, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x43eef4, lpPreviousValue=0x0) returned 1 [0296.737] GetStartupInfoW (in: lpStartupInfo=0x43eeb0 | out: lpStartupInfo=0x43eeb0*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x338, hStdError=0x0)) [0296.737] GetProcessHeap () returned 0x210000 [0296.737] RtlAllocateHeap (HeapHandle=0x210000, Flags=0x8, Size=0x18) returned 0x223688 [0296.737] _wcsnicmp (_String1="COPYCMD", _String2="=::=::\\", _MaxCount=0x7) returned 38 [0296.737] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38 [0296.737] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2 [0296.737] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2 [0296.737] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0296.737] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0296.737] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0296.737] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3 [0296.737] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3 [0296.737] _wcsnicmp (_String1="COPYCMD", _String2="FP_NO_H", _MaxCount=0x7) returned -3 [0296.737] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5 [0296.737] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5 [0296.737] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9 [0296.737] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9 [0296.737] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11 [0296.737] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12 [0296.737] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13 [0296.738] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13 [0296.738] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0296.738] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0296.738] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0296.738] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0296.738] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0296.738] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0296.738] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0296.738] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0296.738] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0296.738] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13 [0296.738] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13 [0296.738] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13 [0296.738] _wcsnicmp (_String1="COPYCMD", _String2="SESSION", _MaxCount=0x7) returned -16 [0296.738] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16 [0296.738] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16 [0296.738] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17 [0296.738] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17 [0296.738] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0296.738] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18 [0296.738] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18 [0296.738] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20 [0296.738] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20 [0296.738] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20 [0296.738] GetProcessHeap () returned 0x210000 [0296.739] HeapFree (in: hHeap=0x210000, dwFlags=0x0, lpMem=0x223688 | out: hHeap=0x210000) returned 1 [0296.739] GetProcessHeap () returned 0x210000 [0296.739] RtlAllocateHeap (HeapHandle=0x210000, Flags=0x8, Size=0xa) returned 0x21f888 [0296.739] lstrcmpW (lpString1="\\vssadmin.exe", lpString2="\\XCOPY.EXE") returned -1 [0296.742] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\vssadmin.exe", lpCommandLine="vssadmin.exe delete shadows /all /quiet", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Windows\\system32", lpStartupInfo=0x43ef50*(cb=0x48, lpReserved=0x0, lpDesktop="Winsta0\\Default", lpTitle="vssadmin.exe delete shadows /all /quiet", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x43ef9c | out: lpCommandLine="vssadmin.exe delete shadows /all /quiet", lpProcessInformation=0x43ef9c*(hProcess=0x80, hThread=0x7c, dwProcessId=0x5e4, dwThreadId=0x5e0)) returned 1 [0296.764] CloseHandle (hObject=0x7c) returned 1 [0296.764] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1 [0296.764] GetProcessHeap () returned 0x210000 [0296.764] HeapFree (in: hHeap=0x210000, dwFlags=0x0, lpMem=0x224ed8 | out: hHeap=0x210000) returned 1 [0296.764] GetEnvironmentStringsW () returned 0x224340* [0296.764] GetProcessHeap () returned 0x210000 [0296.764] RtlAllocateHeap (HeapHandle=0x210000, Flags=0x8, Size=0xb8e) returned 0x224ed8 [0296.764] FreeEnvironmentStringsW (penv=0x224340) returned 1 [0296.764] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0 [0297.528] GetExitCodeProcess (in: hProcess=0x80, lpExitCode=0x43ee90 | out: lpExitCode=0x43ee90*=0x2) returned 1 [0297.528] CloseHandle (hObject=0x80) returned 1 [0297.528] _vsnwprintf (in: _Buffer=0x43efd8, _BufferCount=0x13, _Format="%08X", _ArgList=0x43ee9c | out: _Buffer="00000002") returned 8 [0297.528] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000002") returned 1 [0297.528] GetProcessHeap () returned 0x210000 [0297.528] HeapFree (in: hHeap=0x210000, dwFlags=0x0, lpMem=0x224ed8 | out: hHeap=0x210000) returned 1 [0297.528] GetEnvironmentStringsW () returned 0x224340* [0297.528] GetProcessHeap () returned 0x210000 [0297.528] RtlAllocateHeap (HeapHandle=0x210000, Flags=0x8, Size=0xbb4) returned 0x228630 [0297.528] FreeEnvironmentStringsW (penv=0x224340) returned 1 [0297.528] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1 [0297.529] GetProcessHeap () returned 0x210000 [0297.529] HeapFree (in: hHeap=0x210000, dwFlags=0x0, lpMem=0x228630 | out: hHeap=0x210000) returned 1 [0297.529] GetEnvironmentStringsW () returned 0x224340* [0297.529] GetProcessHeap () returned 0x210000 [0297.529] RtlAllocateHeap (HeapHandle=0x210000, Flags=0x8, Size=0xbb4) returned 0x228630 [0297.529] FreeEnvironmentStringsW (penv=0x224340) returned 1 [0297.529] GetProcessHeap () returned 0x210000 [0297.529] HeapFree (in: hHeap=0x210000, dwFlags=0x0, lpMem=0x21f888 | out: hHeap=0x210000) returned 1 [0297.529] DeleteProcThreadAttributeList (in: lpAttributeList=0x43eef4 | out: lpAttributeList=0x43eef4) [0297.529] _get_osfhandle (_FileHandle=1) returned 0x338 [0297.529] SetConsoleMode (hConsoleHandle=0x338, dwMode=0x0) returned 0 [0297.529] _get_osfhandle (_FileHandle=1) returned 0x338 [0297.529] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x4aba41ac | out: lpMode=0x4aba41ac) returned 0 [0297.529] _get_osfhandle (_FileHandle=0) returned 0xfffffffe [0297.529] GetConsoleMode (in: hConsoleHandle=0xfffffffe, lpMode=0x4aba41b0 | out: lpMode=0x4aba41b0) returned 1 [0297.530] _get_osfhandle (_FileHandle=0) returned 0xfffffffe [0297.530] SetConsoleMode (hConsoleHandle=0xfffffffe, dwMode=0x7) returned 0 [0297.530] SetConsoleInputExeNameW () returned 0x1 [0297.530] GetConsoleOutputCP () returned 0x1b5 [0297.530] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4aba4260 | out: lpCPInfo=0x4aba4260) returned 1 [0297.530] SetThreadUILanguage (LangId=0x0) returned 0x409 [0297.531] exit (_Code=2) Process: id = "16" image_name = "vssadmin.exe" filename = "c:\\windows\\syswow64\\vssadmin.exe" page_root = "0x69619000" os_pid = "0x5e4" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "15" os_parent_pid = "0x588" cmd_line = "vssadmin.exe delete shadows /all /quiet" cur_dir = "C:\\Windows\\system32\\" os_username = "Q9IATRKPRH\\kEecfMwgj" bitness = "32" os_groups = "Q9IATRKPRH\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e8d9" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 245 os_tid = 0x5e0 Thread: id = 246 os_tid = 0x5dc Thread: id = 247 os_tid = 0x674 Thread: id = 248 os_tid = 0x5c4 Thread: id = 249 os_tid = 0x548 Process: id = "17" image_name = "cmd.exe" filename = "c:\\windows\\syswow64\\cmd.exe" page_root = "0x6944c000" os_pid = "0x6bc" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "12" os_parent_pid = "0x4b4" cmd_line = "\"cmd.exe\" /c vssadmin.exe delete shadows /all /quiet" cur_dir = "C:\\Windows\\system32\\" os_username = "Q9IATRKPRH\\kEecfMwgj" bitness = "32" os_groups = "Q9IATRKPRH\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e8d9" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 250 os_tid = 0x6b8 [0297.883] GetProcAddress (hModule=0x75770000, lpProcName="SetConsoleInputExeNameW") returned 0x7579a79d [0297.883] GetProcessHeap () returned 0x390000 [0297.883] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0x400a) returned 0x3a5a70 [0297.883] GetProcessHeap () returned 0x390000 [0297.883] HeapFree (in: hHeap=0x390000, dwFlags=0x0, lpMem=0x3a5a70 | out: hHeap=0x390000) returned 1 [0297.884] _wcsicmp (_String1="vssadmin.exe", _String2=")") returned 77 [0297.885] _wcsicmp (_String1="FOR", _String2="vssadmin.exe") returned -16 [0297.885] _wcsicmp (_String1="FOR/?", _String2="vssadmin.exe") returned -16 [0297.885] _wcsicmp (_String1="IF", _String2="vssadmin.exe") returned -13 [0297.885] _wcsicmp (_String1="IF/?", _String2="vssadmin.exe") returned -13 [0297.885] _wcsicmp (_String1="REM", _String2="vssadmin.exe") returned -4 [0297.885] _wcsicmp (_String1="REM/?", _String2="vssadmin.exe") returned -4 [0297.885] GetProcessHeap () returned 0x390000 [0297.885] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0x58) returned 0x3a3180 [0297.885] GetProcessHeap () returned 0x390000 [0297.885] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0x22) returned 0x3a1fd0 [0297.886] GetProcessHeap () returned 0x390000 [0297.886] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0x40) returned 0x3a31e0 [0297.887] GetConsoleTitleW (in: lpConsoleTitle=0x35f308, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0297.888] GetFileAttributesW (lpFileName="vssadmin.exe" (normalized: "c:\\windows\\syswow64\\vssadmin.exe")) returned 0x20 [0297.888] _wcsicmp (_String1="vssadmin.exe", _String2="DIR") returned 18 [0297.888] _wcsicmp (_String1="vssadmin.exe", _String2="ERASE") returned 17 [0297.888] _wcsicmp (_String1="vssadmin.exe", _String2="DEL") returned 18 [0297.888] _wcsicmp (_String1="vssadmin.exe", _String2="TYPE") returned 2 [0297.888] _wcsicmp (_String1="vssadmin.exe", _String2="COPY") returned 19 [0297.888] _wcsicmp (_String1="vssadmin.exe", _String2="CD") returned 19 [0297.888] _wcsicmp (_String1="vssadmin.exe", _String2="CHDIR") returned 19 [0297.888] _wcsicmp (_String1="vssadmin.exe", _String2="RENAME") returned 4 [0297.888] _wcsicmp (_String1="vssadmin.exe", _String2="REN") returned 4 [0297.888] _wcsicmp (_String1="vssadmin.exe", _String2="ECHO") returned 17 [0297.888] _wcsicmp (_String1="vssadmin.exe", _String2="SET") returned 3 [0297.888] _wcsicmp (_String1="vssadmin.exe", _String2="PAUSE") returned 6 [0297.888] _wcsicmp (_String1="vssadmin.exe", _String2="DATE") returned 18 [0297.888] _wcsicmp (_String1="vssadmin.exe", _String2="TIME") returned 2 [0297.888] _wcsicmp (_String1="vssadmin.exe", _String2="PROMPT") returned 6 [0297.889] _wcsicmp (_String1="vssadmin.exe", _String2="MD") returned 9 [0297.889] _wcsicmp (_String1="vssadmin.exe", _String2="MKDIR") returned 9 [0297.889] _wcsicmp (_String1="vssadmin.exe", _String2="RD") returned 4 [0297.889] _wcsicmp (_String1="vssadmin.exe", _String2="RMDIR") returned 4 [0297.889] _wcsicmp (_String1="vssadmin.exe", _String2="PATH") returned 6 [0297.889] _wcsicmp (_String1="vssadmin.exe", _String2="GOTO") returned 15 [0297.889] _wcsicmp (_String1="vssadmin.exe", _String2="SHIFT") returned 3 [0297.889] _wcsicmp (_String1="vssadmin.exe", _String2="CLS") returned 19 [0297.889] _wcsicmp (_String1="vssadmin.exe", _String2="CALL") returned 19 [0297.889] _wcsicmp (_String1="vssadmin.exe", _String2="VERIFY") returned 14 [0297.889] _wcsicmp (_String1="vssadmin.exe", _String2="VER") returned 14 [0297.889] _wcsicmp (_String1="vssadmin.exe", _String2="VOL") returned 4 [0297.889] _wcsicmp (_String1="vssadmin.exe", _String2="EXIT") returned 17 [0297.889] _wcsicmp (_String1="vssadmin.exe", _String2="SETLOCAL") returned 3 [0297.889] _wcsicmp (_String1="vssadmin.exe", _String2="ENDLOCAL") returned 17 [0297.889] _wcsicmp (_String1="vssadmin.exe", _String2="TITLE") returned 2 [0297.889] _wcsicmp (_String1="vssadmin.exe", _String2="START") returned 3 [0297.889] _wcsicmp (_String1="vssadmin.exe", _String2="DPATH") returned 18 [0297.889] _wcsicmp (_String1="vssadmin.exe", _String2="KEYS") returned 11 [0297.889] _wcsicmp (_String1="vssadmin.exe", _String2="MOVE") returned 9 [0297.889] _wcsicmp (_String1="vssadmin.exe", _String2="PUSHD") returned 6 [0297.889] _wcsicmp (_String1="vssadmin.exe", _String2="POPD") returned 6 [0297.889] _wcsicmp (_String1="vssadmin.exe", _String2="ASSOC") returned 21 [0297.889] _wcsicmp (_String1="vssadmin.exe", _String2="FTYPE") returned 16 [0297.890] _wcsicmp (_String1="vssadmin.exe", _String2="BREAK") returned 20 [0297.890] _wcsicmp (_String1="vssadmin.exe", _String2="COLOR") returned 19 [0297.890] _wcsicmp (_String1="vssadmin.exe", _String2="MKLINK") returned 9 [0297.890] _wcsicmp (_String1="vssadmin.exe", _String2="DIR") returned 18 [0297.890] _wcsicmp (_String1="vssadmin.exe", _String2="ERASE") returned 17 [0297.890] _wcsicmp (_String1="vssadmin.exe", _String2="DEL") returned 18 [0297.890] _wcsicmp (_String1="vssadmin.exe", _String2="TYPE") returned 2 [0297.890] _wcsicmp (_String1="vssadmin.exe", _String2="COPY") returned 19 [0297.890] _wcsicmp (_String1="vssadmin.exe", _String2="CD") returned 19 [0297.890] _wcsicmp (_String1="vssadmin.exe", _String2="CHDIR") returned 19 [0297.890] _wcsicmp (_String1="vssadmin.exe", _String2="RENAME") returned 4 [0297.890] _wcsicmp (_String1="vssadmin.exe", _String2="REN") returned 4 [0297.890] _wcsicmp (_String1="vssadmin.exe", _String2="ECHO") returned 17 [0297.890] _wcsicmp (_String1="vssadmin.exe", _String2="SET") returned 3 [0297.890] _wcsicmp (_String1="vssadmin.exe", _String2="PAUSE") returned 6 [0297.890] _wcsicmp (_String1="vssadmin.exe", _String2="DATE") returned 18 [0297.890] _wcsicmp (_String1="vssadmin.exe", _String2="TIME") returned 2 [0297.890] _wcsicmp (_String1="vssadmin.exe", _String2="PROMPT") returned 6 [0297.890] _wcsicmp (_String1="vssadmin.exe", _String2="MD") returned 9 [0297.890] _wcsicmp (_String1="vssadmin.exe", _String2="MKDIR") returned 9 [0297.890] _wcsicmp (_String1="vssadmin.exe", _String2="RD") returned 4 [0297.890] _wcsicmp (_String1="vssadmin.exe", _String2="RMDIR") returned 4 [0297.891] _wcsicmp (_String1="vssadmin.exe", _String2="PATH") returned 6 [0297.891] _wcsicmp (_String1="vssadmin.exe", _String2="GOTO") returned 15 [0297.891] _wcsicmp (_String1="vssadmin.exe", _String2="SHIFT") returned 3 [0297.891] _wcsicmp (_String1="vssadmin.exe", _String2="CLS") returned 19 [0297.891] _wcsicmp (_String1="vssadmin.exe", _String2="CALL") returned 19 [0297.891] _wcsicmp (_String1="vssadmin.exe", _String2="VERIFY") returned 14 [0297.891] _wcsicmp (_String1="vssadmin.exe", _String2="VER") returned 14 [0297.891] _wcsicmp (_String1="vssadmin.exe", _String2="VOL") returned 4 [0297.891] _wcsicmp (_String1="vssadmin.exe", _String2="EXIT") returned 17 [0297.891] _wcsicmp (_String1="vssadmin.exe", _String2="SETLOCAL") returned 3 [0297.891] _wcsicmp (_String1="vssadmin.exe", _String2="ENDLOCAL") returned 17 [0297.891] _wcsicmp (_String1="vssadmin.exe", _String2="TITLE") returned 2 [0297.891] _wcsicmp (_String1="vssadmin.exe", _String2="START") returned 3 [0297.891] _wcsicmp (_String1="vssadmin.exe", _String2="DPATH") returned 18 [0297.891] _wcsicmp (_String1="vssadmin.exe", _String2="KEYS") returned 11 [0297.891] _wcsicmp (_String1="vssadmin.exe", _String2="MOVE") returned 9 [0297.891] _wcsicmp (_String1="vssadmin.exe", _String2="PUSHD") returned 6 [0297.891] _wcsicmp (_String1="vssadmin.exe", _String2="POPD") returned 6 [0297.891] _wcsicmp (_String1="vssadmin.exe", _String2="ASSOC") returned 21 [0297.891] _wcsicmp (_String1="vssadmin.exe", _String2="FTYPE") returned 16 [0297.892] _wcsicmp (_String1="vssadmin.exe", _String2="BREAK") returned 20 [0297.892] _wcsicmp (_String1="vssadmin.exe", _String2="COLOR") returned 19 [0297.892] _wcsicmp (_String1="vssadmin.exe", _String2="MKLINK") returned 9 [0297.892] _wcsicmp (_String1="vssadmin.exe", _String2="FOR") returned 16 [0297.892] _wcsicmp (_String1="vssadmin.exe", _String2="IF") returned 13 [0297.892] _wcsicmp (_String1="vssadmin.exe", _String2="REM") returned 4 [0297.893] GetProcessHeap () returned 0x390000 [0297.893] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0x210) returned 0x3a3228 [0297.893] GetProcessHeap () returned 0x390000 [0297.893] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0x5a) returned 0x3a3440 [0297.893] _wcsnicmp (_String1="vssa", _String2="cmd ", _MaxCount=0x4) returned 19 [0297.893] GetProcessHeap () returned 0x390000 [0297.893] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0x418) returned 0x3907f0 [0297.893] SetErrorMode (uMode=0x0) returned 0x0 [0297.893] SetErrorMode (uMode=0x1) returned 0x0 [0297.893] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x3907f8, lpFilePart=0x35ee28 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x35ee28*="system32") returned 0x13 [0297.894] SetErrorMode (uMode=0x0) returned 0x1 [0297.894] GetProcessHeap () returned 0x390000 [0297.894] RtlReAllocateHeap (Heap=0x390000, Flags=0x0, Ptr=0x3907f0, Size=0x4a) returned 0x3907f0 [0297.894] GetProcessHeap () returned 0x390000 [0297.894] RtlSizeHeap (HeapHandle=0x390000, Flags=0x0, MemoryPointer=0x3907f0) returned 0x4a [0297.894] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a9b0640, nSize=0x2000 | out: lpBuffer="") returned 0x8f [0297.894] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0297.894] GetProcessHeap () returned 0x390000 [0297.894] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0x154) returned 0x3a34a8 [0297.894] GetProcessHeap () returned 0x390000 [0297.894] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0x2a0) returned 0x390848 [0297.902] GetProcessHeap () returned 0x390000 [0297.902] RtlReAllocateHeap (Heap=0x390000, Flags=0x0, Ptr=0x390848, Size=0x156) returned 0x390848 [0297.902] GetProcessHeap () returned 0x390000 [0297.902] RtlSizeHeap (HeapHandle=0x390000, Flags=0x0, MemoryPointer=0x390848) returned 0x156 [0297.902] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a9b0640, nSize=0x2000 | out: lpBuffer="") returned 0x35 [0297.902] GetProcessHeap () returned 0x390000 [0297.902] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0xe0) returned 0x3a3608 [0297.902] GetProcessHeap () returned 0x390000 [0297.902] RtlReAllocateHeap (Heap=0x390000, Flags=0x0, Ptr=0x3a3608, Size=0x76) returned 0x3a3608 [0297.902] GetProcessHeap () returned 0x390000 [0297.902] RtlSizeHeap (HeapHandle=0x390000, Flags=0x0, MemoryPointer=0x3a3608) returned 0x76 [0297.903] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0297.903] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\vssadmin.exe", fInfoLevelId=0x1, lpFindFileData=0x35ebc4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x35ebc4) returned 0x3a3688 [0297.904] GetProcessHeap () returned 0x390000 [0297.904] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x0, Size=0x14) returned 0x3a2000 [0297.904] FindClose (in: hFindFile=0x3a3688 | out: hFindFile=0x3a3688) returned 1 [0297.904] _wcsicmp (_String1=".exe", _String2=".CMD") returned 2 [0297.904] _wcsicmp (_String1=".exe", _String2=".BAT") returned 3 [0297.904] GetConsoleTitleW (in: lpConsoleTitle=0x35f09c, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0297.926] InitializeProcThreadAttributeList (in: lpAttributeList=0x35ef24, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x35efec | out: lpAttributeList=0x35ef24, lpSize=0x35efec) returned 1 [0297.926] UpdateProcThreadAttribute (in: lpAttributeList=0x35ef24, dwFlags=0x0, Attribute=0x60001, lpValue=0x35efe4, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x35ef24, lpPreviousValue=0x0) returned 1 [0297.926] GetStartupInfoW (in: lpStartupInfo=0x35eee0 | out: lpStartupInfo=0x35eee0*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x360, hStdError=0x0)) [0297.926] GetProcessHeap () returned 0x390000 [0297.926] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0x18) returned 0x3a3688 [0297.926] _wcsnicmp (_String1="COPYCMD", _String2="=::=::\\", _MaxCount=0x7) returned 38 [0297.926] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38 [0297.926] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2 [0297.926] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2 [0297.926] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0297.926] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0297.926] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0297.926] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3 [0297.926] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3 [0297.926] _wcsnicmp (_String1="COPYCMD", _String2="FP_NO_H", _MaxCount=0x7) returned -3 [0297.926] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5 [0297.927] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5 [0297.927] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9 [0297.927] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9 [0297.927] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11 [0297.927] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12 [0297.927] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13 [0297.927] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13 [0297.927] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0297.927] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0297.927] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0297.927] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0297.927] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0297.927] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0297.927] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0297.927] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0297.927] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0297.927] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13 [0297.927] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13 [0297.927] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13 [0297.927] _wcsnicmp (_String1="COPYCMD", _String2="SESSION", _MaxCount=0x7) returned -16 [0297.927] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16 [0297.927] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16 [0297.927] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17 [0297.927] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17 [0297.927] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0297.927] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18 [0297.927] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18 [0297.927] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20 [0297.927] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20 [0297.927] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20 [0297.927] GetProcessHeap () returned 0x390000 [0297.927] HeapFree (in: hHeap=0x390000, dwFlags=0x0, lpMem=0x3a3688 | out: hHeap=0x390000) returned 1 [0297.927] GetProcessHeap () returned 0x390000 [0297.928] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0xa) returned 0x39f888 [0297.928] lstrcmpW (lpString1="\\vssadmin.exe", lpString2="\\XCOPY.EXE") returned -1 [0297.930] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\vssadmin.exe", lpCommandLine="vssadmin.exe delete shadows /all /quiet", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Windows\\system32", lpStartupInfo=0x35ef80*(cb=0x48, lpReserved=0x0, lpDesktop="Winsta0\\Default", lpTitle="vssadmin.exe delete shadows /all /quiet", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x35efcc | out: lpCommandLine="vssadmin.exe delete shadows /all /quiet", lpProcessInformation=0x35efcc*(hProcess=0x80, hThread=0x7c, dwProcessId=0x6f8, dwThreadId=0x268)) returned 1 [0297.938] CloseHandle (hObject=0x7c) returned 1 [0297.939] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1 [0297.939] GetProcessHeap () returned 0x390000 [0297.939] HeapFree (in: hHeap=0x390000, dwFlags=0x0, lpMem=0x3a4ed8 | out: hHeap=0x390000) returned 1 [0297.939] GetEnvironmentStringsW () returned 0x3a4340* [0297.939] GetProcessHeap () returned 0x390000 [0297.939] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0xb8e) returned 0x3a4ed8 [0297.939] FreeEnvironmentStringsW (penv=0x3a4340) returned 1 [0297.939] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0 [0298.192] GetExitCodeProcess (in: hProcess=0x80, lpExitCode=0x35eec0 | out: lpExitCode=0x35eec0*=0x2) returned 1 [0298.192] CloseHandle (hObject=0x80) returned 1 [0298.193] _vsnwprintf (in: _Buffer=0x35f008, _BufferCount=0x13, _Format="%08X", _ArgList=0x35eecc | out: _Buffer="00000002") returned 8 [0298.193] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000002") returned 1 [0298.193] GetProcessHeap () returned 0x390000 [0298.193] HeapFree (in: hHeap=0x390000, dwFlags=0x0, lpMem=0x3a4ed8 | out: hHeap=0x390000) returned 1 [0298.193] GetEnvironmentStringsW () returned 0x3a4340* [0298.193] GetProcessHeap () returned 0x390000 [0298.193] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0xbb4) returned 0x3a8630 [0298.193] FreeEnvironmentStringsW (penv=0x3a4340) returned 1 [0298.193] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1 [0298.193] GetProcessHeap () returned 0x390000 [0298.193] HeapFree (in: hHeap=0x390000, dwFlags=0x0, lpMem=0x3a8630 | out: hHeap=0x390000) returned 1 [0298.193] GetEnvironmentStringsW () returned 0x3a4340* [0298.194] GetProcessHeap () returned 0x390000 [0298.194] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0xbb4) returned 0x3a8630 [0298.194] FreeEnvironmentStringsW (penv=0x3a4340) returned 1 [0298.194] GetProcessHeap () returned 0x390000 [0298.194] HeapFree (in: hHeap=0x390000, dwFlags=0x0, lpMem=0x39f888 | out: hHeap=0x390000) returned 1 [0298.194] DeleteProcThreadAttributeList (in: lpAttributeList=0x35ef24 | out: lpAttributeList=0x35ef24) [0298.194] _get_osfhandle (_FileHandle=1) returned 0x360 [0298.194] SetConsoleMode (hConsoleHandle=0x360, dwMode=0x0) returned 0 [0298.194] _get_osfhandle (_FileHandle=1) returned 0x360 [0298.194] GetConsoleMode (in: hConsoleHandle=0x360, lpMode=0x4a9a41ac | out: lpMode=0x4a9a41ac) returned 0 [0298.195] _get_osfhandle (_FileHandle=0) returned 0xfffffffe [0298.195] GetConsoleMode (in: hConsoleHandle=0xfffffffe, lpMode=0x4a9a41b0 | out: lpMode=0x4a9a41b0) returned 1 [0298.195] _get_osfhandle (_FileHandle=0) returned 0xfffffffe [0298.196] SetConsoleMode (hConsoleHandle=0xfffffffe, dwMode=0x7) returned 0 [0298.196] SetConsoleInputExeNameW () returned 0x1 [0298.196] GetConsoleOutputCP () returned 0x1b5 [0298.196] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a9a4260 | out: lpCPInfo=0x4a9a4260) returned 1 [0298.196] SetThreadUILanguage (LangId=0x0) returned 0x409 [0298.197] exit (_Code=2) Process: id = "18" image_name = "vssadmin.exe" filename = "c:\\windows\\syswow64\\vssadmin.exe" page_root = "0x69914000" os_pid = "0x6f8" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "17" os_parent_pid = "0x6bc" cmd_line = "vssadmin.exe delete shadows /all /quiet" cur_dir = "C:\\Windows\\system32\\" os_username = "Q9IATRKPRH\\kEecfMwgj" bitness = "32" os_groups = "Q9IATRKPRH\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e8d9" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 251 os_tid = 0x268 Thread: id = 252 os_tid = 0x754 Thread: id = 253 os_tid = 0x75c Thread: id = 254 os_tid = 0x794 Thread: id = 255 os_tid = 0x760